For the first time ever, the Securities and Exchange Commission has launched an enforcement action against a computer-security executive over his role in a cybersecurity breach.