🔴 ENDZONE CLAIMS TRUMP MOBILE — ALLEGES ESIM QR CODES + USER PII STOLEN

The EndZone extortion group has newly listed Trump Mobile, the U.S. mobile service launched under the Trump brand, on its leak site.

• The listing was first observed September 23
• EndZone claims the stolen material includes user PII and eSIM QR codes
• The actor mocks the service’s user count and provides no independently verified breach scope in currently available public telemetry
• No evidence currently establishes how access was obtained, whether Trump Mobile infrastructure was directly compromised, or how many customers are affected
• Trump Mobile separately confirmed a third-party data exposure in May involving names, emails, mailing addresses, phone numbers and order identifiers — but that earlier incident should NOT be assumed to be the source of this new claim