TMC Bonds fined $2.1 million for failing to protect client confidentiality