Author-hosted manuscript dated 2 May 2009: cims.nyu.edu/~regev/papers/qcrypto.pdf
Abstract and §1 define learning with errors and the quantum reduction from worst-case lattice problems; §5 gives the cryptosystem. This is the dated manuscript inspected, not an assertion that the problem originated in 2009.