Consumer complaint received 2025-03-27 00:00:00
Product: Student loan — Private student loan
Issue: Dealing with your lender or servicer — Received bad information about your loan
Company: MOHELA
State: CA

Complaint narrative:
To Whom It May Concern, I am writing to file a formal complaint against the U.S. Department of Education and its contracted servicer, MOHELA, for the unauthorized access, use, and potential disclosure of my federally protected educational and financial records. 

On [ insert date of your original complaint to MOHELA ], I submitted a formal complaint to MOHELA regarding a data breach that resulted in the unlawful access and potential dissemination of the following sensitive information without my consent : My academic records and personally identifiable information ( PII ). 
My financial aid records, including XXXX data. 
My IRS tax information and financial data. 
These records are protected under : The Family Educational Rights and Privacy Act ( FERPA ) The Higher Education Act, Title IV regulations The Privacy Act of 1974 Federal data security laws and Department of Education contractual policies MOHELA 's initial response failed to address or investigate the specific breach I reported. Instead, they denied liability by citing their XXXX status, despite their legal and contractual obligation to safeguard my data and notify me of unauthorized access. 

This mishandling of my personal and financial information constitutes a material breach of data protection laws and has exposed me to serious risks, including identity theft, fraud, and financial harm. 

Requested Relief : I am formally requesting that the XXXX Ombudsman and CFPB conduct an immediate investigation into : Whether MOHELA, the U.S. Department of Education, or any affiliated third parties accessed or disclosed my records without proper authorization. 
The scope and extent of this data breach. 
Whether appropriate protocols were followed in protecting, reporting, and remediating this breach. 
Any contractual violations by MOHELA or the U.S. Department of Education concerning data privacy and borrower rights. 
Additionally, I am requesting corrective action, including but not limited to : XXXX loan discharge and cancellation on the grounds of a compromised and unlawful loan agreement. 
Formal data breach notification to me in writing. 
Mandatory reporting to credit bureaus and a fraud alert placed on my behalf. 
XXXX that security measures will be implemented to prevent future violations. 
Financial restitution or relief for any damages arising from this breach. 
I have attached the following documentation to support my complaint : My formal written complaint to MOHELA. 
MOHELAs response. 
A detailed summary of the data breach incident. 
If this matter is not resolved in a timely and satisfactory manner, I reserve the right to pursue additional legal action and damages in federal court. 

I respectfully request acknowledgment of this complaint and written updates regarding the investigation 's progress. 

Sincerely, XXXX XXXX XXXX XXXX

Company public response: Company believes it acted appropriately as authorized by contract or law
Company response to consumer: Closed with explanation