UnknownEnergy & UtilitiesGovernmentUtilitiesEmployee Data InvolvedIdentity (basic)Government IDFinancial accountEmploymentMediumActive

Idaho National Laboratory

bd_3986d3e309953a13 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 20, 2023

Filed

Dec 11, 2023

To disclose

21 days

Affected

Not disclosed

Linked

4 filings

Confidence

64%

Full breach record for Idaho National Laboratory →

Idaho National Laboratory (INL), operated by Battelle Energy Alliance, LLC, reported a cyber data breach affecting an off-site data center housing employee, former employee, spouse, and dependent information. The breach occurred on November 19, 2023, and was discovered on November 20, 2023. Exposed data included names, social security numbers, salary information, and banking details. INL restricted server access, alerted federal law enforcement (DOE, FBI, CISA), and is offering 24 months of Experian IdentityWorks. The investigation is ongoing.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 20, 2023 → Notified Dec 12, 202322d ✓ CA 60-day OK21 days discovery → filing

Incident timeline

undetected · 1 days

discovery → filing · 21 days

Nov 19, 2023

Begins

Nov 20, 2023

Discovered

Dec 11, 2023

Filed

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_2b27a3cb46059b112023-12-11Verified
Oregon State AGbd_8dc9d35a549920aa2023-12-12 · +1dCandidate
Maine State AGbd_cd3541a72a2011cb2023-12-12 · +1dVerified

Name: Idaho National Laboratory
norm: idaho national laboratory
Domain: inl.gov

Name: Idaho National Laboratory
norm: idaho national laboratory
Domain: inl.gov
Industry: Energy & UtilitiesllmGovernmentllm

Discovered: Nov 20, 2023
Breach occurred: Nov 19, 2023
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Dec 12, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountEmployment
Data elements: Social Security numberDate of birth
Attack vector: Unknown
Regulator citations: Investigated by federal agencies including the Department of Energy, Federal Bureau of Investigation, and the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency

During the incident: Restricted access to the server that was involved in the breach
Alerted federal law enforcement agencies
Began the process of confirming the individuals and the types of information that were compromised
Notified impacted individuals and lab stakeholders through internal and external means
Offering complimentary access to Experian IdentityWorks for 24 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 21 days(21 days from discovery to filing)
Compliance flags: CA 60-day OK · 22d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 20, 2023
→ Notified: Dec 12, 2023
22d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 20, 2023 → Notified: Dec 12, 2023	22d	60 days (analyst band, pre-2026 discoveries)	CA 60-day OK

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 11 · first

California State AGDec 11 · first · this page

Oregon State AG+1d

Maine State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-577728
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 11, 2023
Raw hash: a8aa7da33b805f0f9d3664d3579c75f5fe22f97567bdf96b3c3239445446a7fa

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityIdaho National Laboratory

Victim entityIdaho National Laboratory

Incidentdiscovered Nov 20, 2023

Stated responseRestricted access to the server that was involved in the breach

ComplianceCA 60-day OK

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov