Nelnet Servicing, a servicing system and web portal provider for EdFinancial and the Oklahoma Student Loan Authority, experienced a data breach that exposed personal information of 2,501,324 student loan account holders. The breach occurred between June 1 and July 22, 2022, with discovery on August 17, 2022. The compromised data included names, addresses, email addresses, phone numbers, and social security numbers, but did not include financial information. Nelnet's cybersecurity team responded by securing the system, blocking suspicious activity, fixing the vulnerability, and engaging third-party forensic experts to investigate. The exact vulnerability exploited remains unclear. The exposed data presents a risk for future phishing and social engineering attacks, particularly leveraging trust related to student loan forgiveness programs. Remediation efforts include notification of affected individuals and provision of credit monitoring and identity theft insurance.

The breach exposed sensitive personal information of over 2.5 million student loan account holders, including social security numbers, which could facilitate identity theft and targeted phishing attacks. Financial information was not compromised. The exposed data may be leveraged in future social engineering campaigns, especially in the context of student loan forgiveness initiatives, increasing the risk of fraud and scams against affected individuals.

Nelnet has secured the affected information systems, blocked suspicious activity, fixed the vulnerability, and engaged third-party forensic experts for investigation. Affected individuals have been notified and offered two years of free credit monitoring, credit reports, and up to $1 million in identity theft insurance. No further immediate action is required from users beyond monitoring their credit and being vigilant against phishing attempts leveraging this breach.