Student loan company Nelnet agreed to a $10 million settlement over a data security incident that impacted customers' information in 2022.