Nelnet Data Breach Settlement ($10 Million)
2.5 million student-loan borrowers had Social Security numbers and personal data exposed in a June 2022 breach. Nelnet agreed to pay $10 million. The claim deadline passed March 5, 2026.
Revisado Editorialmente — Contenido revisado en cuanto a exactitud utilizando investigación legal publicada, datos gubernamentales y registros judiciales verificados. Vea nuestra metodología
Reviewed by Leonard Goldberg, Editor · Last updated
What the Lawsuit Alleges
Plaintiffs alleged that Nelnet Servicing LLC, Edfinancial Services, and the Oklahoma Student Loan Authority (OSLA) failed to implement adequate data-security measures to protect roughly 2.5 million current and former student-loan borrowers. A breach first detected in June 2022 and disclosed on August 26, 2022 exposed names, addresses, phone numbers, email addresses, and Social Security numbers. Plaintiffs brought claims including negligence, breach of contract, violation of the California Consumer Privacy Act (CCPA), and state consumer-protection statutes. Nelnet denied wrongdoing but agreed to settle.
Case Details
U.S. District Court, District of Nebraska — Case No. 4:22-cv-03191 (In Re: Data Security Cases Against Nelnet Servicing, LLC). Preliminary approval March 31, 2025; amended preliminary approval December 4, 2025; final approval May 21, 2026.
Current Status
Who Is Affected & Can You Join?
The class covers U.S. residents whose personal information was compromised in the June 2022 Nelnet data breach — primarily current and former borrowers whose loans were serviced by Edfinancial Services or OSLA and whose data was stored on Nelnet's systems. About 2.5 million individuals were potentially affected. The claim deadline of March 5, 2026 has passed; new claims are no longer accepted.
Is There a Payout?
Case Timeline
- 1
June 2022 — Data Breach Occurs
Unauthorized parties accessed Nelnet Servicing's systems, compromising personal information of roughly 2.5 million student-loan borrowers serviced by Edfinancial and OSLA, including Social Security numbers.
- 2
August 26, 2022 — Breach Publicly Disclosed
Nelnet announced the data security incident. Class action lawsuits followed and were later consolidated in federal court in Nebraska.
- 3
January 2023 — Class Actions Consolidated
Multiple lawsuits were consolidated into a single class action before the U.S. District Court for the District of Nebraska under Case No. 4:22-cv-03191.
- 4
March 31, 2025 — Preliminary Approval Granted
The court granted preliminary approval of the $10 million settlement. An amended preliminary approval order followed December 4, 2025.
- 5
March 5, 2026 — Claim Deadline Passes; Final Approval May 21, 2026
The deadline to submit claims expired at 11:59 p.m. ET. Final approval was granted May 21, 2026, with payments expected late summer or fall 2026.
Scam & Misinformation Warnings
Whenever a brand lawsuit goes viral, scam sites and bad actors follow. Watch for these red flags:
Fake 'Nelnet Settlement' Claim Websites
Scammers create lookalike portals to harvest Social Security numbers, banking details, or 'processing fees.' The only legitimate site was NelnetSettlement.com (administrator A.B. Data, Ltd., 1-877-388-1763). Never pay a fee to file a class action claim.
Phishing Emails Impersonating the Administrator
Fraudulent emails claiming to be from 'A.B. Data' or 'Nelnet Settlement Administration' may ask you to 'verify' your claim. The real administrator only contacts class members using information already on file. Go directly to the official site rather than clicking links.
Third-Party 'Claim Filing' Services Charging Fees
Class action claims are always free to file. Any service or ad demanding upfront payment or a percentage of your payout to submit your claim is a scam.
Frequently Asked Questions
What was the Nelnet data breach about?
In June 2022, unauthorized parties accessed Nelnet Servicing's systems and obtained personal information of roughly 2.5 million student-loan borrowers whose loans were serviced by Edfinancial Services or the Oklahoma Student Loan Authority. Compromised data included names, addresses, phone numbers, emails, and Social Security numbers. Nelnet disclosed the breach on August 26, 2022.
Is the claim deadline still open?
No. The deadline to submit a claim was March 5, 2026 at 11:59 p.m. ET. That window is now closed and new claims are not accepted. If you believe you were affected but missed it, you can contact the administrator at 1-877-388-1763, though late claims are generally not eligible.
How much will claimants receive?
Claimants with documented losses could claim up to $5,000, plus up to $100 for lost time ($5,100 max). Others who filed valid claims receive a pro-rata share of remaining funds, with California residents getting a 2× multiplier. The exact per-person amount depends on total valid claims. All eligible claimants also receive two years of free credit monitoring.
When will Nelnet settlement payments be sent?
Final approval was granted May 21, 2026. Payments are expected roughly 60–90 days after claims processing completes and the judgment becomes final — an estimated late summer or fall 2026 window, which could shift if appeals are filed.
How do I know if I was in the affected class?
You were likely a class member if your student loan was serviced by Edfinancial or OSLA and your data was stored in Nelnet's systems at the time of the June 2022 breach. Affected individuals received direct notice. If you got a breach or settlement notice, your information was likely compromised.
Separate from this case: were you injured in the last 2 years?
Class-action payouts are fixed amounts through an administrator. A personal injury claim is a different case — and often worth far more. Free estimate, no obligation.