Skipton suffered a serious breach of data security in 2009 when over 3,000 savers received financial details of other customers. When Skipton mailed 108,000 account statements to savers on the weekend of 23–24 January 2010, 3,115 went out with the name, account number, balance and interest earned in the previous year of "different" customers printed on the reverse of the letters. This followed an Information Commissioner's Office finding, in 2008, that Skipton was in breach of the Data Protection Act, following the theft of an unencrypted laptop left by a third party contractor at a gym. The unprotected information lost included names, dates of birth, National Insurance numbers and investment amounts of 14,000 customers.