September 30, 2023

Nelnet has suffered a data breach, exposing some 2.5 million records belonging to the  Oklahoma Student Loan Authority  and  EdFinancial Services LLC.

Nelnet’s, one of division Nelnet Serving informed OSLA and EdFinancial that it had discovered a vulnerability that lead to what it called a data breach.


Company’s security team tasked to take action to secure its servers, block suspicious activity and fix the issue. Forensic team also deployed.

Data potentially stolen included names, addresses, email addresses, phone numbers and Social Security numbers. 

The U.S. Department of Education and law enforcement were subsequently notified of the breach. Still the amount of data stolen is unknown.


Breached companies will continue to face more litigious actions after a data breach, which can often be attributed to a lack of cybersecurity skills and/or awareness within their security team.

Investing in ongoing skill development and training is critical to mitigating threats that could have serious financial and legal ramifications.

Leave a Reply

%d bloggers like this: