I’m sure you know this, but it’s not just regulator’s ire. It is a criminal act in and of itself to disclose that someone is a target of an investigation.

And it’s not just a criminal act for the organisation, but the individual customer service agent can be held personally criminally liable for disclosing, even accidentally.

So yeah, they have a really strong incentive not to tell you anything.