UnknownEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENTMediumActive
Idaho National Laboratory operated by Battelle Energy Alliance, LLC
bd_3986d3e309953a13 · schema v1 · pii pii-v1
Full breach record for Idaho National Laboratory operated by Battelle Energy Alliance, LLC →Idaho National Laboratory (INL), operated by Battelle Energy Alliance, LLC, reported a cyber data breach affecting an off-site data center housing employee, former employee, spouse, and dependent information. The breach occurred on November 19, 2023, and was discovered on November 20, 2023. Exposed data included names, social security numbers, salary information, and banking details. INL restricted server access, alerted federal law enforcement (DOE, FBI, CISA), and is offering 24 months of Experian IdentityWorks. The investigation is ongoing.
California clockDiscovered Nov 20, 2023 → Notified Dec 12, 202322d ✓ CA 60-day OK21 days discovery → filing
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_8dc9d35a549920aaOregon State AGfiled 2023-12-12(1d gap)Candidate
- bd_cd3541a72a2011cbMaine State AGfiled 2023-12-12(1d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-577728
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 11, 2023
- Raw hash
- a8aa7da33b805f0f9d3664d3579c75f5fe22f97567bdf96b3c3239445446a7fa
Reporting entity
- Name
- Idaho National Laboratory operated by Battelle Energy Alliance, LLCnorm: idaho national laboratory operated by battelle energy alliance
- Domain
- inl.gov
Victim entity
- Name
- Idaho National Laboratory operated by Battelle Energy Alliance, LLCnorm: idaho national laboratory operated by battelle energy alliance
- Domain
- inl.gov
Incident
- Discovered
- Nov 20, 2023
- Materiality determined
- —
- Notification sent
- Dec 12, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTEMPLOYMENT
- Attack vector
- Unknown
- Regulator citations
- Investigated by federal agencies including the Department of Energy, Federal Bureau of Investigation, and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency
Compliance
- Time to disclose
- 21 days(21 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 22d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Nov 20, 2023→ Notified: Dec 12, 202322d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.