"In separate letters, the New York Department of Financial Services threatened to impose penalties on Assurant, an insurer, for what it calls inadequate document-retention policies, and urged a Citigroup mortgage unit to comply with a subpoena related to the inquiry."