The thefts were initially reported to the Garda Síochána, however the Banks senior management did not know about the problem until February 2008 after an internal audit uncovered the theft and the Bank did not advise the Data Protection Commissioner and the Central Bank of Ireland until mid-April 2008.