Financial Breach Timeline
GovInfoSecurity.com has a timeline of data breaches affecting US Financial Institutions in 2009. "Stolen or Missing Hardware" was cited in a number of the incidents, along with "Insider Theft".
These data breaches could lead to penalties under a number of state laws. The FTC could also impose fines under the Gramm Leach Bliley Act (GLBA), which requires financial institutions to protect consumer data.