Listen to this article
Approximately 2 minutes
The audio version of this article was created using artificial intelligence technology. Pronunciation errors may occur. We work with our partners to continually analyze and improve results.
Juan Pablo Serrano, wanted since June 2024 in connection with the Desjardins data leak, was arrested in Spain, according to a press release issued Tuesday by Quebec provincial police.
According to the report, Serrano was arrested on the evening of November 6, 2025, thanks to a joint operation by the Spanish authorities, the provincial police and Interpol.
He was one of Quebec's most wanted fugitives. To find Serrano abroad, provincial police say Interpol has issued a “red notice” – a request for law enforcement agencies around the world to find and arrest someone pending extradition.
Serrano is currently in custody in Spain and will face three charges upon his extradition to Canada: identity theft, fraud over $5,000 and trafficking in identity information.
In June 2024, the provincial police posted information about a 40-year-old fugitive online, claiming that he allegedly acquired Desjardins member and client data lists through Sébastien Boulanger-Dorval and carried out various Desjardins data fraud schemes.
Boulanger-Dorval, 42, was arrested on charges of fraud, identity theft, unlawful possession and sale of personal information, and using a computer to commit fraud.
Boulanger-Dorval was the main suspect in the investigation. At the time of the hack, he was working on the Desjardins marketing team and was allegedly selling leaked data to pay off debts.
Over the years, financial institutions have added more guarantees. While experts say your information will always be at risk, there are steps you can take to protect yourself.
