A notorious fugitive wanted across Canada for a massive fraud and data theft targeting Desjardins clients has been apprehended in Spain, as confirmed by Quebec provincial police.
The suspect, Juan Pablo Serrano, a key figure in the criminal operation, was recently arrested on November 6, 2025. Currently detained in Spain, Serrano is expected to be extradited to Canada to face a litany of charges, including fraud, identity theft, and trafficking in stolen identity information.
The high-profile arrest is linked to the extensive data breach at Desjardins in 2019, affecting a staggering 9.7 million clients. Authorities revealed that personal data was illicitly obtained and sold to nefarious individuals involved in various fraudulent activities.
In 2024, a significant breakthrough was made in the investigation dubbed “Portier,” leading to the apprehension of multiple suspects, including a key orchestrator who had worked in Desjardins’ marketing department.
Juan Pablo Serrano had evaded capture since June 2024, but now faces the prospect of legal proceedings once back in Canada. The charges against him remain untested in court.
In a damning assessment in 2020, both the Office of the Privacy Commissioner of Canada and the Commission d’accès à l’information du Québec criticized Desjardins for its failure to adequately safeguard customer data. Reports highlighted that the financial institution had been aware of security vulnerabilities but neglected to rectify them promptly.
The breach spanned over two years before Desjardins took action, only becoming aware of the issue after intervention by law enforcement, as detailed in the investigations.
Keyphrase: Desjardins data breach
