Key Suspect in Desjardins Data Breach Arrested in Spain After 17-Month Manhunt
Juan Pablo Serrano, a fugitive wanted in connection with the 2024 Desjardins data breach, was arrested in Spain on November 6, 2025, following a joint operation by Spanish authorities, Quebec provincial police, and Interpol. Serrano, 40, had been at large since June 2024 and was among Quebec’s most wanted individuals.
Interpol issued a Red Notice for his arrest, enabling global law enforcement to track and detain him. He now faces extradition to Canada, where he will be charged with identity theft, fraud exceeding $5,000, and trafficking in identity information.
Serrano is accused of purchasing stolen Desjardins customer data from Sébastien Boulanger-Dorval, a former Desjardins marketing employee, and using it to carry out fraud schemes. Boulanger-Dorval, 42, was arrested in 2024 and charged with fraud, identity theft, and the illegal sale of personal data—allegedly to settle debts. He was identified as the primary suspect in the breach, having exploited his access to sensitive information while employed at the financial institution.
Desjardins cybersecurity rating report: https://www.rankiteo.com/company/desjardins
"id": "DES1767719603",
"linkid": "desjardins",
"type": "Breach",
"date": "11/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'customers_affected': 'Members and customers',
'industry': 'Banking and Financial Services',
'location': 'Canada',
'name': 'Desjardins',
'type': 'Financial Institution'}],
'attack_vector': 'Insider Threat',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Information'},
'date_publicly_disclosed': '2024-06',
'description': 'Juan Pablo Serrano, wanted in connection with the Desjardins '
'data breach, was arrested in Spain. He allegedly purchased '
'Desjardins members and customers data lists through Sébastien '
'Boulanger-Dorval and executed various fraud schemes. '
'Boulanger-Dorval, a former Desjardins employee, was arrested '
'and charged with fraud, identity theft, and illegal '
'possession and sale of personal information.',
'impact': {'brand_reputation_impact': 'High',
'data_compromised': 'Desjardins members and customers data lists',
'identity_theft_risk': 'High',
'legal_liabilities': 'Yes'},
'initial_access_broker': {'entry_point': 'Insider (Sébastien '
'Boulanger-Dorval)',
'high_value_targets': 'Desjardins members and '
'customers data'},
'investigation_status': 'Ongoing (Extradition pending)',
'motivation': ['Financial Gain', 'Debt Repayment'],
'post_incident_analysis': {'root_causes': 'Insider threat, unauthorized data '
'access and sale'},
'references': [{'date_accessed': '2025-11-06',
'source': 'Quebec provincial police news release'}],
'regulatory_compliance': {'legal_actions': 'Yes'},
'response': {'law_enforcement_notified': 'Yes',
'third_party_assistance': 'Interpol, Spanish authorities, Quebec '
'provincial police'},
'threat_actor': ['Juan Pablo Serrano', 'Sébastien Boulanger-Dorval'],
'title': 'Desjardins Data Breach and Fraud Scheme',
'type': ['Data Breach', 'Fraud', 'Identity Theft']}