I haven't seen anything on the blog about it yet, but some LANL employes are receiving "Dear Sir or Madam" letters from Tom Harper, Chief Information Officer informing us "of a potential compromise of personally identifiable information (PII) related to you." Included in this information is the Social Security Number, and while he says "potential" in the first sentence, the description that follows makes it definite. Despite the fact that this information should not have been accessible over the Net, LANL is telling us that we are responsible for taking steps to protect our identity; it seems, they feel they have no liability even though they implicitly admit liability by belatedly disconnecting computers with this information from the Net.
Apparently, this is from the break-in recently revealed in the press. So far, I have only seen the ORNL details that you have posted on your blog. LANL seems to be escaping most of the attention. My wife and I received our letters just today. Some years ago, when the DOE dumped my wife's information on the web, they eventually paid for credit monitoring through Equifax for a year. I suppose for LANL to do the same would require one of the Bechtel people to have to forego a Santa Fe cocktail party.