Noller said the Guard 's internal investigation is looking into what security policies were breached in the contractor 's handling of the data , which should not have been on an unsecured private laptop .