... it appears the SEC is interested in a customer of IBCL and is using the IBCL case to "attempt" to obtain financial information.
Very unlikely, IMO. The docket cbeemer posted referred to the original SEC action docket (still open). The customer privacy provisions referenced almost certainly refer to the relationship between Bank One, and its (probable) customers TM/IBCL. More than likely, this is part of the penalties determination phase from the original action.
Just to refresh, the wording in the original SEC release: