Trump Mobile Exposes Customer Data Due to Website Vulnerability

Trump Mobile Exposes Customer Data Due to Website Vulnerability

First seen 22 May 2026, 11:24 UTC TechcrunchTheregisterRss.SlashdotTheguardianNewsbytesapp+1 85% similarity 54.6

Article Content

Browse articles
ThreatCluster

A researcher discovered a vulnerability in the Trump Mobile website that exposed personal data of over 27,000 customers, including names, addresses, and phone numbers. The issue was identified through a simple HTTP POST request, allowing access to customer records. Despite attempts to report the vulnerability to Trump Mobile, the researcher received no response, leading to public disclosure via YouTube creators Coffeezilla and penguinz0. Trump Mobile later confirmed the exposure, attributing it to a third-party platform and stating that no financial information was compromised. The company is currently investigating the incident and evaluating customer notification requirements. The data exposure has raised significant concerns among customers and cybersecurity experts.

Key Points: • Over 27,000 Trump Mobile customers had personal data exposed due to a website vulnerability. • The data leak was discovered through a simple HTTP POST request by a self-taught researcher. • Trump Mobile confirmed the exposure and is investigating the incident linked to a third-party provider.

ThreatCluster AI

Timeline

2026-05-20
YouTubers report data exposure
Coffeezilla and penguinz0 announced they were alerted to the data leak affecting Trump Mobile customers.
Techcrunch
2026-05-22
Researcher discloses vulnerability
A researcher named Louis publicly revealed a vulnerability that exposed personal data of Trump Mobile customers.
Theregister
2026-05-22
Trump Mobile confirms data exposure
Trump Mobile acknowledged the exposure of customer data and stated it was linked to a third-party platform.
Techcrunch
2026-05-22
Trump Mobile evaluates customer notification
The company is assessing whether it needs to notify affected customers about the data exposure.
Rss.Slashdot

Community

Browse all →

Tracked Entities in This Story