The agency unleashed a $10 million civil fine in one recent case, and went after a private company for the first time in another.