Nelnet Campus Commerce
bd_f8aaef8aa5a5d8ff · schema v1 · pii pii-v1
Full breach record for Nelnet Campus Commerce →Nelnet Campus Commerce disclosed that an unauthorized individual accessed a third-party reporting application maintaining student and authorized payer data for university clients, including Berklee College of Music. The incident occurred between January 17 and January 19, 2022, and was discovered on January 19, 2022. Affected data included names and other basic identity information; payment information was not compromised. Nelnet disabled credentials, engaged forensic specialists, notified law enforcement, and offered 24 months of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Jan 17, 2022
Begins
Jan 19, 2022
Discovered
Feb 18, 2022
Filed
vs. sector median
4 wks faster
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Maine State AGbd_87291d77b11e7de62022-02-18Candidate
- Indiana State AGbd_8e45f2f2ee9ced832022-02-18Verified
- Massachusetts State AGbd_eca4cda5dec4d4992022-02-22 · +4dVerified
- New Hampshire State AGbd_ce946606a8678af92022-02-25 · +7dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Feb 18 (ME), last Feb 25 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.