Consumer complaint received 2025-02-24 00:00:00
Product: Student loan — Federal student loan servicing
Issue: Improper use of your report — Reporting company used your report improperly
Company: EdFinancial Services
State: AZ

Complaint narrative:
Subject : Formal Complaint Regarding Unauthorized Access to My Educational and Financial Records, Violations of FERPA, Privacy Act, and Internal Revenue Code, and Request for Immediate Remediation To Whom It May Concern : I am writing to formally lodge a complaint regarding the unauthorized access and potential misuse of my sensitive personal, educational, and financial records by the U.S. Department of Education ( DOE ) and the XXXX XXXX XXXX XXXX XXXX XXXX  ). This breach of my privacy constitutes a direct violation of the Family Educational Rights and Privacy Act ( FERPA ), the Privacy Act of 1974, and the Internal Revenue Code ( IRC ), as well as an egregious failure to protect my personal and financial security.

Recent reports and a lawsuit filed by the University of California Student Association ( UCSA ) have revealed that the DOE granted XXXX unauthorized access to internal systems containing personally identifiable information ( PII ), financial aid records, and federal tax information ( FTI ) for millions of individuals, including myself. According to the lawsuit, this access was granted without the required System of Records Notice ( SORN ) under the Privacy Act, in violation of federal law.

As a federal student aid recipient, I entrusted the DOE with my sensitive information, including : My academic records and personally identifiable information ( PII ).

My Free Application for XXXX XXXX XXXX ( XXXX ) data, including financial aid history and loan information. 
My IRS tax transcripts, which were obtained and used without proper authorization. 

The DOEs actions, as alleged in the UCSA lawsuit, have placed my personal and financial data at risk of misuse, identity theft, and fraud. Specifically, the DOEs failure to comply with the following laws has caused me significant harm : FERPA ( 20 U.S.C. 1232g ; 34 CFR Part 99 ) : FERPA grants me the right to control access to my educational records. The DOEs alleged sharing of my data with DOGE without my consent violates this right.

Privacy Act of 1974 ( 5 U.S.C. 552a ) : The Privacy Act requires the DOE to provide public notice ( via a SORN ) before sharing my data with third parties. No such notice was provided, and my consent was not obtained.

Internal Revenue Code ( IRC 6103 ) : The IRC protects the confidentiality of federal tax information ( FTI ). The DOEs alleged sharing of my IRS tax data with XXXX  violates this provision. 


Given the severity of these violations and the potential harm to my financial security and privacy, I demand the following corrective actions : Immediate Investigation : Conduct a formal investigation into whether my personal, educational, and financial records were shared with XXXX  without proper authorization. 
Provide a detailed report on the extent of the data breach, including what information was accessed, who accessed it, and for what purpose. 
Remediation and Transparency : Notify me immediately if my data was accessed or shared with XXXX. 
Implement corrective measures to prevent future unauthorized access to my records.

Credit Monitoring and Fraud Prevention : Notify all major credit bureaus ( XXXX, XXXX, XXXX, and XXXX XXXX ) to place a fraud alert on my accounts and investigate any unauthorized activity resulting from this breach. 

Accountability : Hold responsible parties accountable for violating federal privacy laws and failing to protect my sensitive information. 
Immediate discharge and cancellation of all my federal student loans due to the breach of my financial aid and tax records, which invalidates the integrity of my loan agreements. 

This breach has caused me significant distress and concern regarding the security of my personal and financial data. If my demands are not addressed within 30 days, I will escalate this matter by filing complaints with the Federal Trade Commission ( FTC ), the Consumer Financial Protection Bureau ( CFPB ), and the Treasury Inspector General for Tax Administration ( TIGTA ), as well as pursuing legal action against the responsible parties. 

I request a written response addressing these concerns and outlining the immediate actions being taken to remedy this situation. Please direct all correspondence to the address listed above. 

Thank you for your prompt attention to this urgent matter. I look forward to your immediate response and resolution. 

Sincerely, XXXX XXXX

Company response to consumer: Closed with explanation