It's poor journalism, yes. Especially if it's a lack of disclosure rather than an explicit refusal for disclosure, as investigation takes time.

However, my opinion is that for a corporation, an explicit refusal to provide data could be valid data when morally judging them. They are entitled to the same legal "innocent until proven otherwise" standard as individuals, yeah. But a non-person entity doesn't need the same privacy rights that a person does. They only need whatever privacy is required to maintain confidentiality (e.g. trade secrets, business strategy, insider information, etc.).

If they had non-incriminating and non-confidential evidence proving their innocence, surely they would prefer to release it to minimize reputational damages. So, if they choose not to, it either means that the evidence needs to be confidential, or that it actually is incriminating. Which of those it is, who knows. It's still not a good look, though.