For 26 months, a rogue employee was siphoning sensitive personal information collected by Desjardins from customers who had purchased or received products through the organization.

The agreement, subject to approval by the Quebec Superior Court, would allow eligible individuals affected by the privacy breach announced in June 2019 to receive a payment.