Earlier quoted context omitted.
From my limited understanding, he broke the law but was able to return all the funds to investors. So there weren't damages per se, but I think statutory penalties instead.
SEC cannot bring criminal charges. The Justice Department can. We will see if they do in the case of Elizabeth Holmes.
But if the Justice Department handles this I wouldn't be surprised if this whole thing gets kind of, well, political..
Also, this somehow begs the question who brought the charges in Shkreli's case.