Many pupil loan borrowers caught a huge break this week with government forgiveness of some student loan debt. But for 2.5 1000000 pupil loan borrowers, the week also brought news of a transgress of their contact information and Social Security numbers. Nelnet Servicing in Nebraska provides technology services to EdFinancial and OSLA, including portals that student loan borrowers utilise to create and access their student loan accounts.� Their notification template, a copy of which was submitted to the maine Attorney General’s Office, indicates that Nelnet discovered a vulnerability. They doh not point exactly when they first discovered it although it appears to have been in July. Nor do they describe the nature of the vulnerability. What they do write is the following: On or about July 21, 2022, Nelnet servicing notified Edfinancial and OSLA that it had discovered a vulnerability it believed led to this incident. Nelnet Servicing informed Edfinancial and OSLA that Nelnet Servicings cybersecurity team took immediate action to secure the info system, block the suspicious activity, fix the issue, and launched an investigation with third-party forensic experts to determine the nature and range of the activity. On August 17, 2022, this investigation determined that certain pupil loan account registration information was accessible by an unknown party beginning in June 2022 and ending on July 22, 2022. following these actions, Nelnet Servicing notified the U.S. Department of Education, which in bout notified law enforcement. The info that could have been subject to unauthorized access includes name, address, email address, phone number, and social security number. The full notification appears below.��Those notified are beingness offered 24 months of credit monitoring services. According to Nelnet’s story to the maine attorney General’s Office, a sum of 2,501,324 people were affected by this incident.