Consumer complaint received 2025-03-13 00:00:00
Product: Student loan — Federal student loan servicing
Issue: Improper use of your report — Reporting company used your report improperly
Company: Nelnet, Inc.
State: KS

Complaint narrative:
I am filing a complaint due to unauthorized access to my private student loan information. My student loan details were accessed without my consent by DOGE under XXXX XXXX, which I believe constitutes a serious violation of my privacy rights under applicable federal laws as shown below : 1. Gramm-Leach-Bliley Act ( GLBA ) Financial Privacy Rule & Safeguards Rule Violation : If a financial institution ( such as a student loan servicer or lender ) improperly disclosed your personal financial information to an unauthorized party, it could violate GLBAs Financial Privacy Rule and Safeguards Rule.

Relevant Sections : The Financial Privacy Rule restricts financial institutions from sharing nonpublic personal information without proper disclosure or authorization. 
The Safeguards Rule requires institutions to protect sensitive consumer data from unauthorized access.

2. Higher Education Act ( HEA ) FERPA for Student Loan Data Violation : If your student loan data was accessed without authorization, it could also violate FERPA ( Family Educational Rights and Privacy Act ), which protects student educational and financial records.

Relevant Sections : FERPA applies mainly to student records held by educational institutions, but in some cases, loan servicers working with federal student loans must also comply with its privacy provisions. 
3. Computer Fraud and Abuse Act ( CFAA ) Violation : If unauthorized access was gained through hacking or improper use of a database, it could violate the CFAA, which prohibits unauthorized access to protected computer systems.

Relevant Sections : This law covers accessing a computer system without authorization or exceeding authorized access to obtain personal or financial records. 
4. Identity Theft and Assumption Deterrence Act Violation : If your student loan information was used fraudulently or in a way that could lead to identity theft, this law could apply.

Relevant Sections : Criminalizes obtaining and misusing someones personal financial information for fraud or deception.

5. Federal Trade Commission Act ( FTC Act ) Unfair and Deceptive Practices Violation : If a company ( such as a loan servicer ) failed to properly secure your data, leading to unauthorized access, it could be considered an unfair or deceptive trade practice under the FTC Act.

Relevant Sections : The FTC has enforced actions against companies for failing to protect consumer data.

I did not authorize the release or access of my personal data, nor was I informed of any legitimate basis for such access to be granted to an unauthorized non-government entity. This unauthorized action has caused me significant concern regarding the security of my sensitive information, including but not limited to my loan balance, payment history, and personal identifying details. 

Given the gravity of this violation, I request that the CFPB investigate this matter and take appropriate enforcement action. I also ask for guidance on any steps I should take to protect my financial data from further unauthorized access.

Company response to consumer: Closed with explanation