Desjardins data breach: Laval police arrest 3 suspects, fourth one being sought
Montreal-area police announced Wednesday that they have arrested three people in connection with a major data theft and $8.9-million fraud involving the co-operative financial group Desjardins, some five years after the alleged crime.
Police in Laval, Que., said one of the suspects was caught with a list of personal data for 1.6 million Quebecers.
The arrests are tied to a 2019 data theft, described as the largest ever in the Canadian financial services sector, that targeted more than 9.7 million Desjardins clients in Canada and internationally, including almost seven million Quebecers.
Laval police deputy director of criminal organizations Jean-François Rousselle said the suspects were allegedly able to use the stolen personal information to get access to the clients' accounts through the bank's online banking platform, Accès D.
“These individuals used the data stolen from Desjardins in order to facilitate the conduct of their operations and to disperse funds in Canada, the United States, but also throughout the world," Rousselle said.
"The main method of operation was to obtain, via the Accès D service, a temporary password using the users' personal information that they had in their possession, to then proceed with transactions made directly from bank accounts via the web platform."
Police said the three suspects used the stolen data to commit fraud totalling $8.9 million between September 2018 and January 2019.
Laval's deputy police chief Jean François Rousselle announced three arrests in connection with the 2019 Desjardins data breach. (CTV News)
Thirty-six-year-old Ayoub Kourdal, and 33-year-old Imad Jbara were scheduled to appear in court Wednesday, while a court date for the third suspect has not been set. They face charges of fraud over $5,000, trafficking in identity information, possession of identity information, and identity theft.
Police said they are searching for a fourth person in connection with the fraud and data theft.
Rousselle said the investigation was one of the most complex in the force's history and involved the help of the Quebec provincial police and prosecutors.
It led to raids in Montreal, Laval and St-Augustin-de-Desmaures in 2019 that resulted in the seizure of a large amount of data and 70 pieces of computers and equipment containing thousands of documents and files.
The Office of the Privacy Commissioner of Canada and the Commission d’accès à l’information du Québec published scathing reports in 2020 that concluded Desjardins failed to show the level of attention required to protect its customers' data.
The OPC report found that Desjardins had been aware of the security weaknesses that led to the breach, but failed to address them in time. The breach occurred "over more than a two-year period before Desjardins became aware of it, and then only after the organization had been notified by the police," it found.
The leak was blamed on an employee of the marketing team who was able to access confidential information, despite not having the clearance level to do so, because other employees would copy the information onto a shared drive.
This report by The Canadian Press was first published June 12, 2024.
CTVNews.ca Top Stories
Canadian musician Jacob Hoggard found not guilty of sexual assault
Canadian musician Jacob Hoggard has been found not guilty of sexually assaulting a young woman in northeastern Ontario eight years ago. The former Hedley frontman had pleaded not guilty to sexual assault.
Police arrest Toronto woman in connection with three recent homicides
Police have arrested a Toronto woman in connection with three recent homicides and investigators say that they believe two of the victims may have been 'randomly targeted.'
Missing B.C. climber died from fall on Mount Baker, medical examiner says
The body of a British Columbia mountain climber has been located and recovered after the 39-year-old man was reported missing during a solo climb on Washington state's Mount Baker earlier this week.
Following child's death in Ontario, here's what you need to know about rabies and bats
An Ontario child died last month after coming into contact with a rabid bat in their bedroom, which was the first known human rabies case in Canada since 2019.
A French judge in a shocking rape case allows the public to see some of the video evidence
A French judge in the trial of dozens of men accused of raping an unconscious woman whose now former husband had repeatedly drugged her so that he and others could assault her decided on Friday to allow the public to see some of the video recordings of the alleged rapes.
Former Colorado county clerk Tina Peters sentenced to 9 years for voting data scheme
A judge ripped into a Colorado county clerk for her crimes and lies before sentencing her Thursday to nine years behind bars for a data-breach scheme spawned from the rampant false claims about voting machine fraud in the 2020 presidential race.
Anne Hathaway confirms 'Princess Diaries 3': 'Miracles happen'
You might be thinking, 'Shut up!' but it’s officially true: the 'Princess Diaries' franchise is finally growing.
Youth pleads guilty to manslaughter in death of P.E.I. teen Tyson MacDonald
A teen charged with the murder of another teen on Prince Edward Island last year has pleaded guilty to a lesser charge of manslaughter.
Sask. man pleads guilty in U.S. after unknowingly providing videos of men raping toddlers to FBI agent
A Saskatchewan man living in the United States has pleaded guilty to possessing child pornography after he unknowingly provided disturbing videos to an FBI agent he thought was a pedophile.