Instead of or in addition to suspending or revoking a registration, the Commissioner may: impose on the holder a penalty not exceeding $125,000 for each violation of this subtitle; and require the holder to make restitution to any person that has suffered financial injury because of the violation of this subtitle.