UT-Battelle, which manages and operates Oak Ridge National Laboratory, has to take corrective actions and pay $120,000 for the unauthorized disclosure of classified information and the introduction of classified information into unapproved information systems at the lab, according to a settlement agreement with the U.S. Department of Energy that was approved in August.

The settlement agreement was for a security event discovered March 28, 2016. On that date, UT-Battelle discovered that presentations containing classified information had been processed on unapproved information systems during a roughly five-year period. The classified presentations were stored on unapproved servers, information systems, and removable electronic media, and transmitted by unauthorized means, according to the DOE Office of Enterprise Assessments’ Office of Enforcement.

In addition, classified information was visually presented to uncleared students on a specific program, including three foreign nationals from non-sensitive countries, DOE said.

The highest classification level and category of information contained in the presentations is Secret/Restricted Data, including No Foreign, said Steven C. Simonson, director of the Office of Enforcement. [Read more…]