Consumer complaint received 2025-04-09 00:00:00
Product: Student loan — Federal student loan servicing
Issue: Dealing with your lender or servicer — Trouble with how payments are being handled
Company: Maximus Federal Services, Inc.
State: ME

Complaint narrative:
On XX/XX/XXXX, XXXX XXXX instructed his team, the Department of Government Efficiency ( DOGE ) to gain access to multiple internal systems within the Department of Education, including financial aid dataset that contains the personal information of millions of students enrolled in the federal student aid program. My information was among that dataset that has been compromised.

Violation of FERPA and Privacy Act Rights Unauthorized Access to My Educational Data Dear Sir/Madam, I am writing to formally file a complaint regarding a serious breach of my privacy and violation of my rights under both the Family Educational Rights and Privacy Act ( FERPA ) and the Privacy Act of 1974 ( 5 U.S.C. 552a ). It has come to my attention that my personal and sensitive information, including my Social Security Number ( SSN ) and financial status, was accessed without my consent by individuals who should not have had access to it. Specifically, I believe that XXXX XXXX and XXXX  ( Doge ), a cryptocurrency-related entity, have unlawfully obtained and accessed my educational records stored by the Department of Education XXXX 
I have not provided any consent for such individuals or entities to review or use my data. This breach of my private information is alarming, and I demand an immediate investigation into this unauthorized access. 
As per FERPA, my educational records, including personally identifiable information, are protected from unauthorized disclosure. Further, under the Privacy Act of 1974 ( 5 U.S.C. 552a ), personal data maintained by federal agencies such as the Department of Education must not be disclosed without my consent, except under specific and limited circumstances. The act also outlines that agencies must establish safeguards to ensure the privacy of such data. Clearly, this breach represents a violation of both FERPA and the Privacy Act, and I believe that immediate corrective action is necessary.

The following actions are requested : 1. Investigation : An immediate inquiry into how and why my educational records were accessed by XXXX XXXX and XXXX without my permission, in violation of FERPA and the Privacy Act.

2. Clarification of Access : A detailed explanation of the process that allowed these parties to access sensitive data such as my SSN and financial details, in breach of the legal protections afforded to me under both FERPA and the Privacy Act.

3. Corrective Action : Steps to rectify the breach and ensure that such unauthorized access does not occur again in the future. This includes taking measures to enhance safeguards as mandated by 5 U.S.C. 552a.

4. Notification : Confirmation of the individuals or entities that have viewed or obtained my information and clarification on how my data has been used, in violation of both the Privacy Act and FERPA. 
I trust that the Department of Education takes these legal concerns seriously and will uphold my privacy rights in accordance with both FERPA and the Privacy Act. I expect a prompt response and resolution of this matter. Please contact me at the provided phone number or email address with updates on the status of the investigation. 
Thank you for your immediate attention to this critical issue.

Company response to consumer: Closed with explanation