Bank of America has been hit with a $1.2 billion penalty, making it the third-largest enforcement action in history