On the one hand, I'm not surprised at all that there are security people in the company that can instantly pull up security cam footage of a register from the receipt number. That makes total sense.
But on the other hand, I never would have guessed that a customer service rep would have access to the system -- or even that if they had to transfer it to the security department, that the security department would be allowed to use the footage for anything customer-facing like that.
Still, that's kinda cool and helpful! Assuming it can't be used for any kind of nefarious invasion-of-privacy uses...