Could they, legally, do anything but deny? Shareholders could sue, customers could sue, I could probably sue... seems like a strongly worded legally air-tight denial is their only practical option. Plus it might be illegal to divulge classified info