American financial services giant Morgan Stanley has agreed to pay $35 million to resolve claims made by the US Securities and Exchange Commission (SEC) that one of its units called Morgan Stanley Smith Barney (MSSB), failed to protect the personal information of millions of customers when replacing company hard drives and servers as part of a larger hardware refresh program in 2015.