IMHO, if a company said "We take our customers' privacy seriously, your data is safe, we cannot comment on rumors" many people would interpret that as a confirmation of the original story. That kind of lingo doesn't sound specific enough or convincing nowadays. Maybe we're just too used to that. It seems like today's technical audience demands something that sounds very specific, airtight, watertight, germ-proof, shock-proof, etc