Consumer complaint received 2025-07-16 00:00:00
Product: Credit reporting or other personal consumer reports — Credit reporting
Issue: Problem with a company's investigation into an existing problem — Investigation took more than 30 days
Company: Servicer under contract with Federal Student Aid
State: AR

Complaint narrative:
I am writing to formally lodge a complaint regarding the unauthorized access and breach of my educational records, financial aid data, and IRS tax information by the U.S. Department of Education ( DOE ) and the Department of Government Efficiency ( DOGE ). This breach constitutes a direct violation of the Family Educational Rights and Privacy Act ( FERPA ) and Title IV regulations, as well as an egregious violation of my personal privacy and financial security. I recently discovered that my sensitive and legally protected records were accessed and potentially shared without my consent. This includes but is not limited to : 1. My academic records and personally identifiable information ( PII ).

2. My Free Application for Federal Student Aid ( FAFSA ) data, including financial aid history and loan information.

3. My IRS tax transcripts, which were obtained and used without proper authorization.

These actions violate my rights under FERPA ( 20 U.S.C. 1232g ; 34 CFR Part 99 ), which grants me the right to control access to my educational records, as well as Title IV of the Higher Education Act, which governs the use and protection of federal student aid information. 

Furthermore, unauthorized access to my IRS tax data raises serious concerns regarding potential identity theft, fraud, and violations of federal data security standards. 
Given the severity of this breach and the direct impact on my financial security and privacy, I demand the following corrective actions : 1. Immediate discharge and cancellation of all my federal student loans due to the breach of my financial aid and tax records, which invalidates the integrity of my loan agreements.

2. A formal investigation into this data breach, including details on how my records were accessed, who accessed them, and for what purpose.

3. A full report on the extent of my data exposure and the corrective measures being implemented to prevent future violations.

4. Immediate notification to all major credit bureaus ( XXXX XXXX XXXX XXXX XXXX XXXX ) to place a fraud alert and investigate any unauthorized activity that may have resulted from this breach. 
This breach has caused significant distress and concern regarding the security of my personal and financial data. If my demands are not met within 30 days, I will be left with no choice but to escalate this matter through legal channels, including filing complaints with the Federal Trade Commission ( FTC ), the Consumer Financial Protection Bureau ( CFPB ), and pursuing legal action against the responsible parties. 
Certified letter was sent to the Department as of XXXX  and received as of XXXX at XXXX. A case number was received from the company as of XXXX  and no other communication has been obtained. As of XXXX I placed a call to advise that it has been XXXX or more with no response to the dispute where an agent advise that it was pending but no other information could be retrieved. As of today XXXX, I spoke with another representative that advise of the same information, it was requested that the call be escalated although there was not a superior available at the time to take the call.

Company response to consumer: Untimely response