Ads by TechWords

See your link here
Receive the latest technology news and information.
Security
Computerworld Daily News (First Look and Wrap-Up)
Computerworld Blogs Newsletter
The Weekly Top 10
Cloud Computing
View all newsletters




Privacy Policy
 

Breach at Los Alamos labs may have exposed classified data on nukes

Highly classified info was sent out over unprotected e-mail networks

June 18, 2007 12:00 PM ET

Computerworld - Several officials at the company that manages security at the Los Alamos National Laboratory (LANL) used unprotected e-mail networks earlier this year to share highly classified information related to the characteristics of materials used in nuclear weapons.

The incident occurred on Jan. 19 and was considered so serious that a U.S. Department of Energy official was notified of it in the midst of a White House event.

Now, Rep. John Dingell (D-Mich.), chairman of the House Committee on Energy and Commerce, wants to know why a subcommittee investigating an October 2006 security breach at LANL was not told about the January compromise.

Dingell last week wrote a letter (download PDF) to U.S. Department of Energy Secretary Samuel Bodman expressing concern over the failure of the National Nuclear Security Administration (NNSA)  to notify the subcommittee of the breach. The NNSA is a semiautonomous body within the DOE that's responsible for supervising the country's nuclear facilities.

In his letter, Dingell noted that NNSA officials learned of the Impact Measurement Index-1 (IMI-1) security incident from an official at a California university on Jan. 19. According to DOE severity ratings, an IMI-1 security incident is the most serious type and is defined as "actions, inactions, or events that pose the most serious threats to national security interests and/or critical DOE assets." Such incidents involve the "confirmed or suspected loss or diversion of a nuclear devices or components or weapons data" and break-ins into systems containing top-secret data, according to a DOE description.

When the NNSA learned of the incident, it immediately started working through the Lawrence Livermore National Laboratory to "identify, recover and sanitize" all systems involved, Dingell's letter said. Los Alamos National Security LLC, the contractor responsible for managing security at LANL, initiated an investigation into the event and had completed it by May 18, Dingell said.

"We find it unacceptable that throughout this period, several NNSA, Department of Energy and LANL officials with specific knowledge of this incident met with us on multiple occasions, and a senior LANL official testified twice before the Subcommittee, without mentioning a word about this matter," Dingell said. Instead, all of the information the subcommittee had was provided to its staff by "sources outside of NNSA," he said.

In his letter, Dingell demanded that an unredacted copy of the investigation report and damage assessment be provided to the committee. He also asked for an explanation of why NNSA did not notify the committee of the breach and provide a description of "accountability measures" taken or planned as a result of the breach.

Neither LANL nor NNSA officials responded immediately to requests for comment.



Jump to comments

Los Alamos National Labs

Additional Resources

Xerox
By using solid ink technology only from Xerox, you could save up to 65% by printing color for the cost of black and white. Enter for a chance to WIN a PhaserTM 8860 network color printer!
Microsoft
Save time and mitigate security risk. Deploy it now.
Sybase
In this white paper, IDC analyzes the role of next-generation mobile enterprise platforms as organizations seek a more strategic deployment of mobile solutions.

Learn the important issues you must consider before starting your next mobility initiative. Get your mobility white paper from IDC now, compliments of Sybase.

What People Are Saying

White Papers & Webcasts

Share our Strength
Download Now  

Managing Secure File Transfer to Save Time, Money and IT Resources
Learn how companies are using innovative technology to overcome these challenges and improve user productivity by offloading e-mail attachments and replacing FTP with...

Security Convergence Equals Network Security Cost Savings
Listen to IBM Internet Security Systems' take on network security convergence.

Disaster Recovery 2008: Reduced Costs and Improved Performance
How long can your Enterprise afford to be without your data? With an accelerated disaster recovery program, you never have to answer this...