$76.7 million paid to Desjardins customers affected by 2019 data breach
Nearly one million claims have been processed as compensation continues for the breach that exposed millions of members' personal information.
The day's top stories, food & events — every morning at 7. Unsubscribe anytime.
Desjardins has paid out $76.7 million in compensation to customers affected by the 2019 data breach that compromised personal information belonging to 2.9 million members and clients.
Of the 992,326 claims submitted under two compensation programs, the majority related to time spent taking protective measures after the breach. The time-spent compensation program accounted for $43.9 million of the total payout, with the remainder going to eligible victims of identity theft.
The Quebec Superior Court approved a settlement of more than $200 million in 2022. The compensation process remains ongoing, with the court being asked to authorize payment of approximately $51,000 each to 74 late claimants. The source does not specify when the compensation process began, the deadline for submitting claims, or what triggers the "late claimant" category and why 74 claimants are affected in this way.
In 2024, the Sûreté du Québec charged six individuals in connection with the breach.
When did the compensation process begin, and what was the deadline for submitting claims?
Why are these 74 claimants considered 'late' and what circumstances led to their exclusion from the earlier rounds?
We'll update this story as answers emerge.
The facts
How much has Desjardins paid out for the 2019 data breach?
$76.7 million has been paid to customers affected by the breach.
How many people had their personal information exposed in the breach?
2.9 million Desjardins members and clients had their personal information compromised.
How many claims have been processed?
992,326 claims have been submitted and processed under the two compensation programs.
What was the largest component of the payouts?
The time-spent compensation program accounted for $43.9 million of the total, covering the time customers spent taking protective measures after the breach.
