Desjardins data breach: Laval police arrest 3 suspects, fourth one being sought
Montreal-area police announced Wednesday that they have arrested three people in connection with a major data theft and $8.9-million fraud involving the co-operative financial group Desjardins, some five years after the alleged crime.
Police in Laval, Que., said one of the suspects was caught with a list of personal data for 1.6 million Quebecers.
The arrests are tied to a 2019 data theft, described as the largest ever in the Canadian financial services sector, that targeted more than 9.7 million Desjardins clients in Canada and internationally, including almost seven million Quebecers.
Laval police deputy director of criminal organizations Jean-François Rousselle said the suspects were allegedly able to use the stolen personal information to get access to the clients' accounts through the bank's online banking platform, Accès D.
“These individuals used the data stolen from Desjardins in order to facilitate the conduct of their operations and to disperse funds in Canada, the United States, but also throughout the world," Rousselle said.
"The main method of operation was to obtain, via the Accès D service, a temporary password using the users' personal information that they had in their possession, to then proceed with transactions made directly from bank accounts via the web platform."
Police said the three suspects used the stolen data to commit fraud totalling $8.9 million between September 2018 and January 2019.
Laval's deputy police chief Jean François Rousselle announced three arrests in connection with the 2019 Desjardins data breach. (CTV News)
Thirty-six-year-old Ayoub Kourdal, and 33-year-old Imad Jbara were scheduled to appear in court Wednesday, while a court date for the third suspect has not been set. They face charges of fraud over $5,000, trafficking in identity information, possession of identity information, and identity theft.
Police said they are searching for a fourth person in connection with the fraud and data theft.
Rousselle said the investigation was one of the most complex in the force's history and involved the help of the Quebec provincial police and prosecutors.
It led to raids in Montreal, Laval and St-Augustin-de-Desmaures in 2019 that resulted in the seizure of a large amount of data and 70 pieces of computers and equipment containing thousands of documents and files.
The Office of the Privacy Commissioner of Canada and the Commission d’accès à l’information du Québec published scathing reports in 2020 that concluded Desjardins failed to show the level of attention required to protect its customers' data.
The OPC report found that Desjardins had been aware of the security weaknesses that led to the breach, but failed to address them in time. The breach occurred "over more than a two-year period before Desjardins became aware of it, and then only after the organization had been notified by the police," it found.
The leak was blamed on an employee of the marketing team who was able to access confidential information, despite not having the clearance level to do so, because other employees would copy the information onto a shared drive.
This report by The Canadian Press was first published June 12, 2024.
CTVNews.ca Top Stories
![](https://www.ctvnews.ca/polopoly_fs/1.6930794.1718830568!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg)
Calls for change to B.C.'s child protection system after disturbing case of neglect
Is B.C.'s child protection system outdated and in need of a major overhaul? The province's representative for children and youth believes so, and that 'a new model' is needed.
Ont. mother loses $6K during Facebook marketplace transaction
An Ontario woman is sharing her story after she lost $6,000 by clicking a fraudulent link disguised to look like an e-transfer during a Facebook Marketplace transaction.
Rapper Travis Scott arrested for disorderly intoxication, trespassing early Thursday
American rapper Travis Scott, whose legal name is Jacques Bermon Webster, was arrested and booked into Miami-Dade County Jail early Thursday morning, county jail records show.
Train collision in Chile kills at least 2 people and injures 9 others
At least two people were killed and nine others injured Thursday when a train full of passengers collided head-on with another train on a test run just outside the capital of Chile, where fatal railway crashes remain rare.
Senators approve bill to fight foreign interference after voting down amendment
The Senate has passed a government bill intended to help deter, investigate and punish foreign interference.
Gunman in Toronto shooting was not evil, but 'broken' by fraud dispute: wife
The wife of the gunman in Monday's double murder-suicide in North York says she doesn't consider her husband an evil person, but one who was 'broken' by a lengthy fraud dispute that saw their family savings drained.
Heat warnings blanket the east and in Northwest Territories; humidex temperatures push the mid-40s
Heat warnings blanket Canada's eastern corridor Thursday as the year's first major heat wave drags on, and even parts of Northwest Territories are feeling the burn.
Why olive oil is so expensive right now, and the impact it's having on restaurants
Canadian restaurants that rely on what is being called 'liquid gold' as the backbone of their menu are being forced to eat a massive extra cost during a worldwide olive oil shortage.
Can a marriage survive a gender transition? Yes, and even thrive. How these couples make it work
A partner's gender transition does not necessarily mean a death sentence for a marriage. Data is scant, but couples and therapists say that in many cases, a relationship grows and flourishes under the light of new honesty.