NSA honeypots
I would actually feel better if this were the case, but given that we have "the very best people" currently running our cybersecurity infrastructure I doubt it.
Most likely scenario is a 20-something holdover from DOGE who accidentally had his phone p0wned while downloading groyper memes.
Most likely scenario is a janitor who installed an app (I'm guessing it was called LegitWorldCupWatch420696969) on his phone (which might be connecting to the wifi network from whatever locker he leaves it in while he's on the clock, the WH is not a giant SCIF). Or any number of other mundane, easy to overlook employees who work outside of the actual secured areas of the building.