Morgan Stanley hired a moving company that did not specialize in discarding data and tasked it with disabling thousands of servers and hard drives, the agency said. The moving company subsequently sold thousands of the bank’s devices, some of which contained customer data, to a third party before they were eventually resold on an online auction site. The bank has recovered some but not most of the equipment, the SEC said.