Twenty-six financial firms agreed to pay about $393 million in total fines after the US Securities and Exchange Commission said they failed to keep their employees’ electronic communications, the latest fallout from the regulator’s so-called WhatsApp investigations.