Desjardins data theft: 36,000 customer profiles on a suspect’s computer

In particular, it is alleged that computer equipment seized in September 2019 from the home of suspect Juan Pablo Serrano contained more than 36,000 profiles. personal information that appears to come from Desjardins and related to credit card customers at Desjardins.

During the analysis of the MacBook laptop computer seized from the residence of Juan Pablo Serrano, the sergeant-investigator finds that Serrano is using the pseudonym Bl4ckpanther on the ICQ instant messaging platformcan we read in an affidavit prepared by the Sûreté du Québec.

In analyzed conversations, Bl4ckpanther mentions selling profiles from Desjardins. These conversations demonstrate that Bl4ckpanther also uses pseudonyms yoda and Young Yodawe specify.

This information is contained in a denunciation prepared in February 2021 by the Economic Crimes Investigation Division of the Sûreté du Québec in order to obtain a search warrant at the offices of the Mouvement Desjardins.

A physical wallet for carrying out cryptocurrency transactions was also reportedly seized from the suspect Serrano.

An approach dynamic

We learn in another denunciation of 2019 that the police would have used an approach dynamic during the search at Juan Pablo Serrano’s house.

“The significant risk of destruction of evidence from computer data combined with the elements of danger of the subject concerned make the use of a dynamic entry technique possible for the execution of this judicial authorization”, can we read.

Suspect Serrano has a criminal record dating back to the 2000s for violence, fraud, and other Criminal Code offences. He is not the subject of any charges in the Desjardins file.

Other individuals in the Quebec region are suspected of having purchased personal data stolen from Desjardins Group.

It was a suspicious transaction that occurred in Laval in December 2018 that aroused the suspicions of Desjardins, who filed a complaint with the Laval police department.

The SQ investigation began in June 2019. It concerns possible offenses of identity theft, trafficking in identifying information, fraud over $5,000 and offense for the benefit of a criminal organization.

A former Desjardins employee is suspected of having stolen the data of millions of customers, but does not yet face any charges.

An out-of-court settlement of $200 million was reached in December 2021 following class actions undertaken after the leak of personal information that affected more than 9 million Desjardins members or clients.

Follow by Email