Nelnet Data Breach Class Action, $10M Settlement, Up to $5,000 Cash Claim Deadline March 5, 2026

The claim deadline is today — March 5, 2026. File immediately at NelnetSettlement.com.

Nelnet Servicing, Edfinancial Services, and the Oklahoma Student Loan Authority (OSLA) agreed to a $10 million class action settlement resolving claims they failed to protect borrower data in a June–July 2022 cyberattack. The breach compromised the personal information of approximately 2,501,324 student loan borrowers. Plaintiffs sued asserting claims of negligence, breach of implied contract, unjust enrichment, violation of the California Consumer Privacy Act, and violations of state consumer protection statutes. The defendants deny all wrongdoing but agreed to settle to avoid the expense and uncertainty of continued litigation.

Everything You Need Before You Read Further

Who Can File — Eligibility

You qualify if you received a data breach notification from Nelnet Servicing, Edfinancial Services, or OSLA regarding the August 2022 data security incident. You do not need to prove you suffered identity theft or financial harm — just that your data was exposed.

You are not eligible if:

• You had a Nelnet account but your data was not part of the 2022 breach
• You are not a U.S. resident
• This settlement is strictly for the 2022 data breach — it does not apply to Nelnet’s separate student loan repayment miscalculation lawsuits

What You Can Claim — Your Three Options

You must choose one of the following payment options. You cannot combine them.

Option 1 — Documented Out-of-Pocket Losses (up to $5,000)

For consumers who suffered verifiable financial harm from the breach. Eligible expenses include unreimbursed fraudulent charges on bank or credit card accounts, fees for replacing government IDs, notary, postage, fax or copying costs related to resolving identity theft, long-distance phone charges related to fraud resolution, and professional fees such as accountant, attorney, or credit repair services. Receipts and documentation required.

Option 2 — Lost Time (up to $100)

Cash for lost time dealing with the breach, up to four hours at $25 per hour — maximum $100. No documentation required beyond your attestation.

Option 3 — Pro-Rata Cash Payment (no documentation needed)

A one-time pro-rata payment from what remains in the net settlement fund after attorneys’ fees, administration costs, lead plaintiff service awards, and the cost of all other benefits are deducted. Estimated at $15–$50 depending on the number of valid claims filed. California residents receive a two-times multiplier on their pro-rata payment due to state-specific laws.

Plus — Free Credit Monitoring (all class members)

All class members may also file a claim to enroll in two free years of credit monitoring and identity theft protection. This includes identity restoration services and $1 million in identity theft insurance, with a retail value of $187 per year. Activation codes will be issued via email.

How to File Your Claim

Step 1. Go to NelnetSettlement.com — the only official, court-authorized settlement website.

Step 2. Click “File a Claim.” Enter your unique ID and PIN from your settlement notice if you have one. If you cannot find your notice, you can still file a “blank” claim form at the official settlement website.

Step 3. Choose your compensation option — documented losses, lost time, or pro-rata cash.

Step 4. Select your payment method — check or electronic payment. All checks must be cashed within 60 days of issuance.

Step 5. Submit online before March 5, 2026, or mail your completed form postmarked by March 5, 2026 to:

Nelnet Data Security Settlement c/o A.B. Data Ltd. P.O. Box 173032 Milwaukee, WI 53217

Questions? Call 877-388-1763 or email [email protected]

What the Lawsuit Alleges

An attacker exploited a vulnerability in Nelnet Servicing’s shared web environment between June and July 22, 2022, gaining unauthorized access to borrower data stored on servers used by OSLA and Edfinancial. By targeting Nelnet — the central technology hub — attackers were able to move down the supply chain and impact millions of individuals across multiple institutions through a single vendor breach.

Nelnet notified Edfinancial on July 21, 2022, that it had discovered a vulnerability. The U.S. Department of Education and law enforcement were also notified. Public notification went out on August 26, 2022.

Plaintiffs alleged Nelnet failed to implement reasonable data security measures to protect personally identifiable information, resulting in class members being exposed to fraud and identity theft.

What Data Was Exposed

The breach compromised names, addresses, phone numbers, email addresses, and Social Security numbers. No bank account or credit card numbers were reported stolen.

Key Dates

Opt Out or Object

To opt out: Submit a written exclusion request by mail postmarked by March 5, 2026. Opting out means you receive no settlement benefits but preserve the right to file your own lawsuit against Nelnet, Edfinancial, or OSLA.

To object: File a written objection with the U.S. District Court for the District of Nebraska and serve copies on class counsel by March 5, 2026. You must remain a class member to object.

If you do nothing, you will receive no payment and will be bound by past and future court rulings, including the settlement release.

FAQs

Is the claim deadline really today? 

Yes. March 5, 2026 is the final claim deadline. File online right now at NelnetSettlement.com. There are no extensions.

I didn’t get a notice. Can I still file? 

Yes. You can still file a “blank” claim form at the official settlement website. Check your email spam folder for a notice from Nelnet or the settlement administrator.

Do I need a lawyer to file? 

No. Filing is free and takes about 10 minutes online. Never pay anyone to file your claim — the process costs nothing.

Is this related to student loan forgiveness? 

No. This settlement is strictly for the 2022 data breach. It has nothing to do with loan forgiveness, repayment amounts, or income-based repayment disputes.

When will I get paid? 

Approximately 60–90 days after the court grants final approval on May 5, 2026 — expect payments around late summer or fall 2026.

What if I already filed a claim? 

You do not need to file again. Your previously submitted claim will be reviewed.

Can I claim both cash and credit monitoring? 

Yes. Credit monitoring is available to all class members in addition to whichever cash option you select.

For context on how similar data breach cases develop, see AllAboutLawyer.com’s coverage of the Conduent data breach affecting 14.7 million victims — currently at the class action stage — and the 23andMe $50M settlement, which followed a nearly identical breach-to-settlement timeline.

Last Updated: March 5, 2026

This article is for informational purposes only and does not constitute legal advice. Legal claims and outcomes depend on specific facts and applicable law. For advice regarding a particular situation, consult a qualified attorney.

About the Author

Sarah Klein, JD, is a licensed attorney and legal content strategist with over 12 years of experience across civil, criminal, family, and regulatory law. At All About Lawyer, she covers a wide range of legal topics — from high-profile lawsuits and courtroom stories to state traffic laws and everyday legal questions — all with a focus on accuracy, clarity, and public understanding.
Her writing blends real legal insight with plain-English explanations, helping readers stay informed and legally aware.
Read more about Sarah