Senator Demands to Know Why Trump Mobile Is Missing Some FCC Filings After Hack

Trump Mobile, a mobile virtual network operator (MVNO) that the Trump family launched in June 2025 with a $47.45-a-month plan, has suffered a hack and a data leak. A second scandal followed: a senator demanded an explanation of why some of the company's documents cannot be found at the Federal Communications Commission (FCC). Ars Technica covers the story only briefly. The scale of the leak, the number of affected people and the type of data are not named in the available excerpt.

What we know and what we don't

The facts are thin. There was a hack, there was a leak, and a senator has questions about the regulatory paperwork side of the business. Everything else remains speculation for now, and it should not be presented as established.

A missing record in FCC databases can be read in several ways. One: the company really did not file the required forms. Two: it filed them under a different legal entity or through a partner. For an MVNO this is a common arrangement, since the network, the radio spectrum and some of the obligations stay with the host carrier. The same goes for devices. The certification for the T1 smartphone, announced at a price of $499, may be listed under the manufacturer rather than the brand on the box. So the senator's question is best read as a request to clarify the corporate structure, not as a ready-made accusation.

Which FCC documents are usually expected from a carrier

The specific list of complaints has not been published, but the typical set for a company of this profile looks like this:

• Equipment authorization (FCC ID): required for any device that emits radio signals and is sold in the US.
• Annual CPNI certification: rules for protecting customer data, due by March 1.
• Registration in the Robocall Mitigation Database for voice service providers.
• Form 499-A: a report on contributions to the Universal Service Fund.
• Breach notification: under rules in effect since 2024, the FCC, the FBI and the Secret Service must be notified no later than seven business days after a reasonable determination that a breach occurred. Customers must be notified without unreasonable delay, within 30 days at most.

The last item matters more than the rest. If the leak affected subscriber data, the reporting clock is already running, and checking whether the carrier met the deadline will be easy.

Practical steps for customers and competitors

It makes sense for Trump Mobile subscribers to change the password for their account and linked services, enable two-factor authentication that does not rely on SMS, and ask the carrier for a written notice listing exactly what data leaked. If the database held phone numbers, addresses and payment details, it is worth freezing your credit file in advance and watching for SIM-swap attempts. For phone numbers, that is the classic next step for attackers.

For other players in the market, the story works as a maturity check. A branded carrier without its own network is still responsible for customer data, and the regulator holds it to the same standard as large companies. The owners' political profile only raises the scrutiny on every missing document. The next move belongs to the senator and the FCC: either answers with filing numbers will appear, or the questions will multiply.