The SEC said hackers may have illegally profited by trading using information stolen from its disclosure database.