A potential security flaw on Trump Mobile's website has exposed the personal details of an estimated 27,000 people who sought to buy a gold-coloured smartphone.
The company, launched by Donald Trump's family business, is investigating the issue with the assistance of independent cybersecurity professionals. They're working to resolve the problem. The exposed information includes full names, addresses, and phone numbers of people who filled out preorder forms.
Trump Mobile said in a statement that it hasn't identified evidence that its systems, infrastructure, or network were directly compromised. The investigation is ongoing. The company has put in place additional safeguards and monitoring measures to prevent further issues.
Customers are advised to remain alert for any suspicious emails, calls, or text messages regarding their orders. Trump Mobile won't ask customers to provide payment information, passwords, or other sensitive information through unsolicited communications. They don't want customers to fall victim to phishing scams.
The discovery coincided with Trump Mobile beginning to distribute its bespoke T1 smartphones after an almost 10-month delay. The company had initially promised to manufacture the phones in the US, but it has since changed its plan. It's now using components from other countries.
An Australian programmer, who has been working in IT for nearly 20 years, discovered the site's possible security flaws and reported them to Trump Mobile. Jonathan Soma, a programmer and professor at New York's Columbia University, reviewed the code and said the website used a common e-commerce model. He didn't find anything unusual about it.
"I probably started three phone purchases and didn’t buy any of them," Soma said.
The security vulnerability comes nearly a year after the Trump Organization debuted the cellular service and smartphone product in June 2025. At the time, Trump's sons Eric and Donald Jr announced plans for a new "sleek, gold smartphone" that would be "proudly designed and built in the US for customers who expect the best from their mobile carrier". They emphasized the importance of American-made products.
The Trump Mobile website now says the phones are "designed with American values in mind". Last week, the company's chief executive, Pat O'Brien, said the first T1 phones were assembled in the US. They'll use components "primarily manufactured" locally from now on.
O'Brien wouldn't confirm how many preorders there had been. He told USA Today that Trump Mobile was "incredibly pleased" with the interest in its products. He said the T1 phones were starting to be shipped to customers. They're excited to get the phones out to people.
- 27,000 people's personal details were exposed
- The exposed information includes full names, addresses, and phone numbers
- Trump Mobile is working with independent cybersecurity professionals to resolve the issue
- The company has put in place additional safeguards and monitoring measures
- Customers are advised to remain alert for any suspicious emails, calls, or text messages regarding their orders
The investigation into the security flaw is ongoing. Trump Mobile is evaluating any applicable notification obligations. The company hasn't identified evidence that its systems, infrastructure, or network were directly compromised. It's still looking into the matter.
As the company distributes its smartphones, it's crucial that it addresses the security concerns of its customers. The incident highlights the need for companies to prioritize cybersecurity and protect their customers' personal information. It's a vital step in maintaining trust.
The Trump Organization's foray into the smartphone market has been met with significant attention, given the company's high profile and the controversy surrounding its business dealings. The security flaw is a major issue that the company must address to maintain the trust of its customers. It's a challenge they can't ignore.