CU Student Choice is a financial intermediary operating in the education lending space. The company's platform, StudentChoice.org, connects student borrowers with a network of over 220 credit unions across the United States, facilitating private student loans for undergraduate and graduate education and student loan refinancing to consolidate debt or adjust repayment terms.
The operation handles significant volume, having assisted over 138,000 families with financing and helped more than 67,000 borrowers with loan payoff. The threat model for an organization in this sector is straightforward: it's a high-value target for financial fraud, credential stuffing, and data exfiltration. The attack surface includes borrower PII, financial account data, and integration points with hundreds of credit union partners.
For a cybersecurity professional, the operational reality means securing a platform where the data in transit and at rest is directly tied to consumer debt and identity. The work involves protecting a multi-tenant financial ecosystem, ensuring the integrity of lending workflows, and defending against threats targeting both the borrower-facing portal and the backend systems that interface with the credit union network.
