As cited
Copy frozen at (site build).
breaches incidents
Trump Mobile customers' data dumped - and some never even received their gold device
Trump Mobile suffered a data breach affecting 3,615 customers, with the ransomware-as-a-service group BYOD claiming to have stolen names, email addresses, phone numbers, home addresses, and order details. The attackers reportedly gained initial access through an infostealer targeting a Liberty Mobile employee, and claim the wireless provider did not use multifactor authentication (MFA). Trump Mobile's response and delayed security response suggested a lack of incident response capability, and a second criminal group, EndZone, also claimed responsibility for a contemporaneous breach of the same data.
Why it matters: Mobile virtual network operator (MVNO) customers and partner organizations face supply-chain compromise risk when MVNOs lack MFA and incident response protocols; security leaders should audit their MVNO partners' security posture and verify that vendors handling customer personally identifiable information (PII) maintain proper access controls.
- Source published
- First seen by Cybersecurity Tracker