The Idaho National Laboratory (INL), a leading research center for national security and nuclear energy, has suffered a major data breach that compromised the personal information of more than 45,000 individuals. The INL data breach occurred on November 20, 2023, when hackers accessed the lab’s cloud-based Oracle HCM HR management platform, which stores employee records and benefits information.
What data was stolen, and who is affected?
According to breach notification letters sent by INL to the affected individuals, the hackers stole data such as names, addresses, dates of birth, social security numbers, driver’s license numbers, passport numbers, bank account numbers, and health insurance information.
The data belonged to current and former employees of INL (including postdocs, graduate fellows, and interns), as well as their dependents and spouses. The breach did not affect employees hired after June 1, 2023.
How did the breach happen, and what is being done?
INL discovered the breach on November 20, 2023, and immediately notified the U.S. Department of Energy (DOE), which oversees the lab, as well as the Cybersecurity and Infrastructure Security Agency (CISA) and the Federal Bureau of Investigation (FBI). The lab also hired a third-party cybersecurity firm to assist with the investigation and remediation.
The lab said the hackers exploited a vulnerability in the Oracle HCM system, which has since been patched. The lab also said it has taken steps to enhance its security posture and prevent future incidents.
What should the affected individuals do?
INL advised the affected individuals to monitor their credit reports and bank accounts for any suspicious activity, and to report any identity theft or fraud to the relevant authorities.
The lab apologized for the inconvenience and distress caused by the breach, and said it is committed to protecting the privacy and security of its employees and their families.
Keep in touch with our blog to read the latest news and innovations in the cybersecurity world.
Facebook: Eagle Tech Corp
Instagram: @eagletech_corp
Twitter: @eagletechcorp
LinkedIn: Eagle Tech
YouTube: Eagle Tech Corp
