This indicates inefficiency from the department. Ideally the communication should reach the company within few days, if they found proof of wrong doings. Also not naming the company creates ambiguity. Transparency is the key here and department should be clear in its press releases.
I may be wrong as I am not from Finance or CA background and do not understand the processes.