Desjardins Group has announced that a massive data breach from earlier this year is much larger in scope than previously believed and has affected 4.2 million of its members.
Guy Cormier, president and chief executive of Desjardins, announced the update Friday following the release of new information in the investigation.
“What we are announcing is not a new leak,” he said. “This is an update on the same breach by the same malicious person.”
READ MORE: Amid backlash, Desjardins unveils new measures to help members who were victims of data theft
In June, the Quebec-based financial institution said the personal information of nearly three million members was shared illegally by an employee. As part of the breach, the employee was reportedly able to leak social insurance numbers and other sensitive information to third parties outside of the organization.
Desjardins specified on Friday that the breach affects banking members in both Quebec and Ontario. It is not yet known if it affects more business members.
READ MORE: Quebec provincial police interrogate 17 people about Desjardins data leak
Last month, the provincial police force questioned 17 people of interest and conducted multiple property searches as part of an investigation dubbed “Portier.” The force said it met 91 witnesses in the Quebec City, Montreal and Laval areas without making a formal arrest.
Desjardins has said that one employee, who was allegedly responsible for the breach, has been fired.
The massive leak has sparked multiple probes into the incident. Aside from the Quebec provincial police, the Office of the Privacy Commissioner of Canada and Quebec’s access to information commission are also investigating.
The Quebec firm has given all members who do banking with Desjardins in Quebec and Ontario identity protection as of July. It will now extend its Equifax credit monitoring to all of its members.
Desjardins maintains there has been no spike in fraud cases due to the breach.
Quebec Finance Minister Éric Girard said he is open to holding a parliamentary committee on the issue of privacy protection as demanded by the province’s opposition parties. However, he also defended the province’s approach, saying he is satisfied with how Desjardins has handled the breach.
“Desjardins has been very transparent on this issue,” he said. “What is important is the protection of members’ information and financial assets.”
— With files from the Canadian Press
Comments