IIRC it was first mentioned on a small cryptography mailing list in late 2008. Satoshi's posts about it are archived
here and the paper was published at
https://bitcoin.org/bitcoin.pdf.
He later wrote about it on the P2P Foundation page
here.
His first post on this forum was in November 2009, approximately a year after the release of the original whitepaper.