Morgan Stanley to pay $35M after hard drives with 15M customers' personal data turn up in auction

“While MSSB recovered some of the devices, which were shown to contain thousands of pieces of unencrypted customer data, the firm has not recovered the vast majority of the devices,” the SEC said in a statement.