 The Office of the Comptroller of the Currency, which regulates Morgan Stanley Bank NA and Morgan Stanley Private Bank NA, announced the penalty on Oct. 8. In both cases, sensitive information may have been left on decommissioned hardware. 