The SEC has collected thousands of staff messages used on private devices from more than a dozen major investment companies