Student Loans, Hotels & Auto · Student Loan Servicer · Private litigation + Data breach
Nelnet
Headline
The 2022 breach was fully settled in 2026 - four years from incident to resolution, which is the number worth carrying rather than the settlement amount.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
The 2022 breach was fully settled in 2026 - four years from incident to resolution, which is the number worth carrying rather than the settlement amount. Student loan borrowers exposed in 2022 spent the entire intervening period with their Social Security numbers in circulation while the legal process ran, and the credit monitoring typically offered after a breach expires long before the litigation does. The mismatch between how long stolen identifiers remain dangerous and how long the remedy lasts is the structural finding across every breach row in this tracker.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Case status. Private litigation; no sources are on file yet, so no legal tier is assigned.
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
CONFIRMED 2022 BREACH, FULLY SETTLED IN 2026: an unauthorized third party breached Nelnet Servicing's systems (June-July 2022, disclosed Aug 26, 2022), exposing names, addresses, emails, phone numbers, and SOCIAL SECURITY NUMBERS for approximately 2,501,324 current/former EDFINANCIAL SERVICES and OKLAHOMA STUDENT LOAN AUTHORITY (OSLA) borrowers — both serviced through Nelnet's platform. Nelnet, Edfinancial, and OSLA agreed to a $10 MILLION settlement (Judge John M. Gerrard of the U.S. District Court for the District of Nebraska granted final approval in May 2026, per Bloomberg Law, May 22, 2026), offering cash payments plus credit monitoring; the claim deadline (March 5, 2026) has now passed, meaning borrowers who missed it — even if their data WAS compromised — are no longer eligible for payment.
Fees and billing
MULTIPLE SEPARATE SERVICING-QUALITY LAWSUITS (current status of each not verified as of Oct 2026): (1) a 2024 class action alleges Nelnet has REPEATEDLY MISCALCULATED student loan borrowers' monthly repayment amounts; (2) a 2020 class action alleges Nelnet misled certain borrowers into believing they had FEDERALLY-BACKED loans eligible for CARES Act pandemic relief, when they did not — a particularly harmful error given how much financial relief hinged on that eligibility distinction during the pandemic.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy nelnet.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service nelnet.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.