Hackers Enter UCLA Health and Expose Carl’s Jr. Model, While Worker Leaks National Guard Data

In case you missed our coverage this week in ThreatWatch, Nextgov’s regularly updated index of cyber breaches:

Army National Guard Personnel Data Inadvertently Exposed

During a security incident different than the one affecting 21.5 million federal employees and their family members, Guard member information was breached. 

All current and former Army National Guard members dating back to 2004 could be affected by the situation. Records containing sensitive information were accidentally transferred to an insecure data center by a contractor. 

A military spokesman said, "We do not believe the data will be used unlawfully."

Topless Photos of Carl’s Jr. Model Leaked

The Instagram page of Charlotte McKinney, 23, apparently was taken over by a hacker. “I’m gonna be so damn hungover tomorrowww,” one caption on a picture read. The topless pictures were taken down one day later and replaced with a note explaining the circumstances and apologizing to fans.

Major Data Compromise at UCLA Health System

Hackers forced entry into parts of the hospital center’s network containing medical and personal information. There is no evidence yet data was copied, but the possibility cannot be ruled out, UCLA said.

“UCLA Health has been investigating suspicious activity on its network since October, but the intrusion wasn't confirmed until May,” the LA Times reports.

According to CNN, evidence indicates the hackers crawled into computers in September 2014. In October 2014, university network alarms detected suspicious activity.

Customers of Bitcoin Transaction Firm Cloudminr Have Been Fleeced

The bitcoin-mining firm’s database apparently is defunct. A sample of the database was posted to the Norwegian company's now-shuttered website, while other snippets were posted to online bulletin boards like Pastebin.

According to CoinDesk, the collapse resulted “in the loss of bitcoins, the publishing of personal user information and accusations of fraud.” Cloudminr had earlier drawn criticism for its operational secrecy and accusations it was a Ponzi scheme soon followed.

On July 6, a Bitcoin Talk account for the service claimed a hack had taken place: "Part of the bitcoins went to hackers addresses instead of our own payment addresses. Currently, we are looking for any logs related to the hack and estimating the losses.”

(Image via Lisa-Lisa/ Shutterstock.com)