I doubt they could verify it otherwise they could have simply stated they have verification the key wasn't compromised. Instead they said an "investigation has

I doubt they could verify it otherwise they could have simply stated they have verification the key wasn't compromised. Instead they said an "investigation has not revealed evidence" which can mean anything. Just looking at a bunch of logs (or even if you don't have any logs) you can claim the investigation "has not revealed evidence".