A ransomware group calling itself BYOD says it leaked a file containing 3,615 Trump Mobile customer records on a dark-web site, claiming the dataset included names, email addresses, phone numbers, home addresses and order details and naming Eric Brunnett, the Trump Organization’s vice president and CIO, among the entries. BYOD alleges it gained access by installing a Remote Access Trojan on an employee device at Liberty Mobile - the Florida-based provider that powers Trump Mobile’s MVNO - then pivoted to exposed Trump Mobile subdomains and a backend dashboard, supplying a screenshot and claiming ongoing access. The group also reported that Trump Mobile told them it lacked a team to handle the incident and characterized intruders as terrorists; BYOD has since distanced itself from another group, Endzone, which recently claimed a separate Trump Mobile theft.
Independent checks by PCMag contacted three people listed in the leak who confirmed interactions with Trump Mobile, and Straight Arrow News found additional corroborating entries, though not every record was verified and no passwords or payment card numbers were shown in published data. Security experts warn exposed contact and order information could fuel phishing or social‑engineering attacks. Key questions remain unresolved: whether the alleged backend access is still live, the exact infection vector and malware family, and how broadly customers’ data may be affected.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
San Francisco has approved a 45-day moratorium on new data centers that support artificial intelligence, with a possible extension to 22 months. The city aims to study their environmental and community impacts and develop long-term regulations. (sfstandard.com)
Patrick Tomlinson and Niki Robinson were swatted 55 times over two years due to false reports linked to a social media post about Norm Macdonald. They received a $575,000 settlement from the City of Milwaukee after repeated police raids that violated their rights. (cbc.ca)
A Jev-driven pipeline was used to diagnose and repair incidents by collecting cluster evidence and selecting likely causes without an LLM agent. It achieved a 76.2% success rate across 105 diagnoses with a median time of 14.6 seconds. (sregym.com)
South Korea reports that AI agents were likely used to carry out hacking attacks on its banks. The government is investigating the involvement of artificial intelligence in the cyber breaches. (reuters.com)
A Toronto-based VPN provider plans to cease operations in Canada due to a new lawful-access bill. The legislation requires tech companies to provide government access to encrypted data, prompting the company's withdrawal. (theglobeandmail.com)
Debate surrounds whether to shut down air travel for two months to contain a potential Russia-related plague. Experts argue that modern treatments and contact tracing make such travel bans unnecessary. (news.ycombinator.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.