Consumer complaint received 2025-03-15 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Improper use of your report — Report provided to employer without your written authorization
Company: MOHELA
State: GA

Complaint narrative:
XXXX XXXX XXXX XXXX XXXX XXXX XXXX XXXX, GA XXXX XXXX XXXX XXXX : XXXX XX/XX/XXXX Consumer Financial Protection Bureau XXXX XXXX XXXX XXXX Washington XXXX DC XXXX Subject : Formal Complaint Regarding Unauthorized Access to Personal Education Records Dear Sir or Madam, I am writing to formally file a complaint regarding what I believe to be a serious violation of my privacy rights under federal law. I have reason to suspect that XXXX XXXX, along with his employees and representatives, has accessed my personal education records without my prior written consent. Such unauthorized access appears to be in direct violation of the Family Educational Rights and Privacy Act ( FERPA ), codified at 20 U.S.C. 1232g and further defined by regulations at 34 CFR Part 99.

FERPA explicitly prohibits the disclosure of personally identifiable information from a students education records without the students ( or, in the case of minors, the parents ) written consent. The actions taken by XXXX XXXX and his team, as I understand them, constitute a breach of this federal mandate. In addition to this breach, I am gravely concerned that since the unauthorized access occurred, there has been no assurance that my personal dataincluding credit reporting information and student loan recordshas remained unaltered, secure, or accurate. 

Moreover, I have substantial reason to believe that my sensitive information may have been disseminated onto the XXXX XXXX, thereby exposing me to potential identity theft, financial harm, and other related risks. Given the potential magnitude of this breach, I respectfully request that your office undertake the following actions : Immediate Investigation : Launch a thorough investigation into the unauthorized access of my education records, including any evidence that these records have been improperly disseminated or tampered with. 

Data Security and Remediation : Work with the appropriate agencies and institutions to determine the extent of the breach, ensure that corrective measures are put in place, and prevent any further unauthorized access or alteration of my personal data. 

Deletion of Compromised Records : In light of the severe potential risksespecially concerning my student loan recordsI request that the Department of Education consider the deletion of my student loan data from its databases, should it be found that these records have been compromised. 

In addition to FERPA, I am also concerned that aspects of this incident may invoke provisions of the Privacy Act of XXXX ( 5 U.S.C. 552a ), which mandates the safeguarding of personal data held by federal agencies. The unauthorized access and potential subsequent misuse of my education records are not only distressing but also pose serious risks to my financial and personal well-being. 

I have enclosed all relevant documentation that supports my claims, including a timeline of events and correspondence that may assist in your investigation. Please acknowledge receipt of this complaint and inform me of the steps that will be taken to address these serious issues. I can be reached at the phone number or email address listed above if you require any additional information. 

Thank you for your prompt attention to this matter. 

Sincerely, XXXX XXXX XXXX

Company response to consumer: Closed with explanation