Spanish authorities arrested Juan Pablo Serrano on November 6, 2025, following a coordinated international operation. The Surete du Quebec and Interpol collaborated with local Spanish police to locate the 40-year-old suspect who had been evading authorities for over a year. Serrano was wanted in connection with one of the most significant data breaches in Canadian history involving Desjardins Group.
The suspect had been the target of an intense search by financial and cybercrime units since June 2024. Investigators allege that Serrano played a pivotal role in the theft and resale of personal data belonging to 9.7 million clients. Rather than using traditional hacking methods to infiltrate the system, the breach was facilitated by an insider who provided the sensitive information.
Police believe Serrano purchased the massive database from a former Desjardins employee and subsequently utilized the information for various fraudulent activities. This method of acquisition highlights the significant risks posed by internal threats within large financial organizations. Experts note that the incident was particularly damaging because the individual involved had excessive access to sensitive client files.
The international manhunt was bolstered by a Red Notice issued through Interpol, which alerted law enforcement agencies globally to locate and detain Serrano for potential extradition. This formal request ensured that he remained a priority for border and police services outside of Canada. The notification was essential in tracking his movements across international borders until his eventual capture in Spain.
With the arrest now confirmed, the legal process for Serrano's return to Quebec to face charges of theft and fraud can begin. This development marks a major milestone for the SQ’s cybercrime division as they continue to address the fallout of the 2019 data breach. The case remains a high-profile example of the complexities involved in prosecuting large-scale digital crimes and managing insider security risks.
Source: Canadian Fugitive Arrested In Spain Over Major Desjardins Data Leak