The official merchandise website of FBI Director Kash Patel, Based Apparel, was abruptly taken offline on Friday following reports that hackers had hijacked the platform to infect visitors with credential-stealing malware, as first reported by Straight Arrow News.
How the Based Apparel Cyberattack Unfolded
At the time of writing, the Based Apparel e-commerce platform remains completely inaccessible to the public. The security incident came to light on Thursday when an X user operating under the pseudonym Debbie posted a warning indicating that the brand’s website was actively distributing malicious software. Specifically, the site was flagged for hosting an “infostealer”—a dangerous category of malware engineered to compromise victim devices and harvest sensitive personal credentials and passwords. A cybersecurity researcher subsequently analysed the payload to confirm the threat.
Based Apparel could not be reached for immediate comment regarding the breach. Inquiries sent to a Gmail address previously associated with Patel have received no response.
Wider Security Failures in the MAGA Ecosystem
The cyberattack on Patel’s retail outlet capped off a highly problematic week for the digital infrastructure of business ventures linked to the MAGA movement.
Trump Mobile Exposes Sensitive Customer Data
On Friday, the network provider responsible for Trump Mobile confirmed that the company had left highly sensitive customer details entirely unprotected on the public internet. The exposed data cache included full names, email addresses, physical mailing addresses, mobile phone numbers, and unique order identifiers. This security failure was confirmed just days after an independent researcher discovered the vulnerability and alerted two YouTubers who had purchased the Trump-branded phones that their private information was visible online.