Trump Mobile said it was reviewing whether customers must be formally notified after a possible website security flaw exposed personal information connected to thousands of attempted smartphone orders.
The company said the affected information included names, email addresses, mailing addresses, phone numbers, and order identifiers. It said investigators had not found evidence that payment cards, banking details, Social Security numbers, call records, or text messages were involved.
The investigation began as Trump Mobile started shipping its delayed T1 smartphone, bringing fresh attention to how the company collected and protected customer information during the preorder process.
Trump Mobile is investigating the exposure
Trump Mobile said it was investigating the issue with help from independent cybersecurity professionals.
Based on the information available at the time, the company said its network, systems, and infrastructure did not appear to have been directly compromised. The statement suggested that the incident may have involved how customer order information was displayed or accessed on the website, rather than a broader intrusion into company systems.
The investigation remained ongoing, meaning the number of people involved and the exact cause had not been confirmed.
Customer contact details may have been visible
The potentially exposed records included full names, email addresses, mailing addresses, mobile phone numbers, and order identification numbers.
Trump Mobile said the issue did not appear to involve payment card numbers, bank account information, Social Security numbers, call histories, text messages, or other highly sensitive financial data.
Even without financial information, contact and order details can still create risks. Criminals may use them to make fraudulent emails, calls, or text messages appear more convincing.
The 27,000 estimate may include abandoned orders
An Australian programmer reportedly discovered the possible vulnerability while examining Trump Mobile’s website and notified the company.
Jonathan Soma, a programmer and Columbia University professor, later reviewed the copied website code connected to the issue. The order sequence had reached approximately 27,224, which suggested that as many as 27,000 customer records could have been involved.
However, that figure did not necessarily represent completed purchases. The system reportedly created a record before payment, meaning abandoned carts and repeated attempts by the same shopper could have increased the total.
The company is reviewing notification duties
Trump Mobile said it had added monitoring and other safeguards while evaluating any legal obligations to notify affected customers.
Data breach notification rules vary depending on where customers live, what information was exposed, and whether the incident created a reasonable risk of misuse. Companies may be required to contact consumers, state regulators, or attorneys general when certain personal information is accessed without authorization.
Trump Mobile had not confirmed that every person represented in the records would receive a notice. Its final decision was expected to depend on the findings of the cybersecurity investigation.
Customers were warned about scams
The company advised people who had attempted to order a T1 phone to remain alert for suspicious messages related to their purchases.
A scammer with access to a customer’s name, phone number, address, and order details could impersonate Trump Mobile and claim that an additional payment or an identity check is required.
Trump Mobile said it would not request payment information, account passwords, or other sensitive details through unsolicited emails, calls, or text messages. Customers should avoid clicking unexpected links and contact the company through independently verified channels.
The issue arrived during the T1 rollout
The possible exposure became public as Trump Mobile began shipping its long-delayed $499 T1 smartphones.
The company announced the phone in June 2025 and originally expected to begin deliveries later that year. The release was repeatedly delayed before Trump Mobile said in May 2026 that shipments had begun.
Chief Executive Pat O’Brien said existing preorder customers were expected to receive their devices over the following several weeks. Early media reviews began appearing after the first units were distributed.
U.S. manufacturing claims changed
Trump Mobile originally promoted the T1 as a smartphone designed and built in the United States.
The company later changed its website language, describing the device as shaped by American innovation or designed with American values. O’Brien said the first phones were assembled in the United States and that future versions would increasingly use domestically produced components.
The shift attracted criticism because producing a modern smartphone entirely in the United States would require a supply chain that currently depends heavily on overseas manufacturers. The company maintained that American assembly and sourcing would increase over time.
The investigation could affect customer trust
The exposed information did not appear to include the most sensitive types of financial or identity data. However, the timing could still create a challenge for a new mobile brand already facing questions about delays, manufacturing claims, and preorder terms.
Customers who paid deposits or submitted order forms expected the company to protect the information needed to complete their purchases. A clear explanation of what happened, how many people were affected, and what safeguards were put in place could help reduce uncertainty.
Trump Mobile’s next steps will depend on the investigation and applicable state notification laws. Customers may also expect direct guidance on recognizing order-related scams and confirming the legitimacy of company communications.
TL;DR
- Trump Mobile is investigating a possible website flaw that exposed customer order information.
- The affected data may include names, email addresses, mailing addresses, phone numbers, and order identifiers.
- The company said payment cards, bank details, Social Security numbers, calls, and texts did not appear to be involved.
- Website records suggested as many as 27,224 attempted orders, but some may have been abandoned or duplicated.
- Trump Mobile is reviewing whether it must formally notify affected customers.
- Customers were warned to watch for fraudulent calls, emails, and text messages connected to T1 orders.
- The incident became public as the delayed $499 T1 smartphone began shipping.
