Trump Mobile probes security flaw that exposed customer details

The issue first came to light after security researchers discovered that Trump Mobile’s website may have exposed sensitive preorder information through poorly secured order pages. According to a new report from The Guardian, Trump Mobile has confirmed that the exposed data included customer names, phone numbers, email addresses, shipping addresses, and order numbers.

Meanwhile, a Trump Mobile spokesperson earlier said no call details, Social Security numbers, bank account information, call logs, or text messages were compromised. The company also argues there’s no evidence its internal systems were compromised directly. The issue seems to be more with the way the preorder database is structured.

An Australian IT professional found that order pages allegedly used sequential order numbers with little security in place. In practice, that meant someone could cycle through order IDs and pull up customer information tied to preorder entries. Professor Jonathan Soma of Columbia University, who reviewed the exposed code, estimated that the system may have held data associated with as many as 27,224 potential preorders, per the report.

The bigger issue here isn’t just one exposed preorder page. Launching a telecom brand already requires customers to trust you with sensitive personal data, payment, and mobile service info. Such an early security scare can make that trust much harder to earn.

Meanwhile, Trump Mobile says it has added extra monitoring and safeguards as the investigation continues. The company is also warning customers to watch out for phishing emails, suspicious calls, and fake support messages related to their orders.