HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumActive
Nelnet Servicing, LLC Class Action Settlement
bd_b9b75f81b0aae71e · schema v1 · pii pii-v1
Full breach record for Nelnet Servicing, LLC Class Action Settlement →Nelnet Servicing, LLC filed a New Hampshire Attorney General data breach notification on September 12, 2022. The incident involved unauthorized access to student loan borrower records, compromising personal information including Social Security numbers, addresses, and financial account data. The breach is linked to a class action settlement regarding a June-July 2022 cyberattack affecting approximately 2.5 million borrowers.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/nelnet-servicing-20220912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 12, 2022
- Raw hash
- 774e7db7121f3f4090f7a8eeb8026dfd03b7e3a5cc445e3c9995d81239a57b60
Reporting entity
- Name
- Nelnet Servicing, LLC Class Action Settlementnorm: nelnet servicing llc class action settlement
- Domain
- nelnetsettlement.com
Victim entity
- Name
- Nelnet Servicing, LLC Class Action Settlementnorm: nelnet servicing llc class action settlement
- Domain
- nelnetsettlement.com
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.