Morgan Stanley agreed to pay a fine of $6.5m following an agreement with a coalition of attorneys general over the financial services provider compromising millions of customers’ personal information.

Morgan Stanley, doing business as Morgan Stanley Smith Barney LLC, failed to decommission its computers and erase unencrypted data in certain computer devices that were later auctioned while still containing consumers’ personal information, according to New York Attorney General Letitia James.