Desjardins data breach cost $108 million, banking co-op says

The Desjardins Group says last year's theft of the personal data of its 4.2 million members ultimately cost the co-operative $108 million.

The Quebec-based financial institution initially estimated the cost of a malicious employee's breach — which also affected 1.8 million credit card holders — at $70 million.

Chief executive Guy Cormier says the impact is less than one per cent of its $18 billion in revenues in 2019.

It may seem like a large amount, but he says Desjardins has "ample capacity" to absorb the expense.

The costs are mainly related to the package of measures offered to members, such as free credit monitoring service from Equifax for five years.

Cormier says there should be no further increase in costs related to the data theft, which has plunged the co-operative into turmoil since it was revealed last June.