"2.5 Million Impacted by Data Breach at Nelnet Servicing"

The data of more than 2.5 million individuals were recently compromised in a data breach at technology services provider Nelnet Servicing.  The impacted individuals have taken student loans from Edfinancial and OSLA, which have contracted Nelnet for various services, including an online portal that student loan borrowers can use to access their accounts.  Nelnet says threat actors gained access to its systems in June and maintained the unauthorized access until July 22.  Nelnet told Edfinancial and OSLA that the attackers exploited a vulnerability in its systems for initial access and that the issue was addressed immediately after the unauthorized access was discovered, and the impacted systems are now secured.  On August 17, Nelnet determined that, while dwelling in its network, the threat actors behind the attack had access to certain student loan account registration information.  The exposed data includes the impacted individuals' names, addresses, email addresses, phone numbers, and Social Security numbers.  The company noted that this incident did not impact the security of customers' financial account numbers or payment information.  Nelnet did not share further information on the nature of the data breach.

SecurityWeek reports: "2.5 Million Impacted by Data Breach at Nelnet Servicing"