BANK of Ireland could face legal action and penalties following the theft of four laptops containing the data of 10,000 customers.