No doubt corporate policy requires legal approval before releasing any personal information to authorities. It's possible the manager even gave the credit card info to the police, but in order to protect his/her job asked them never to reveal that information publicly. That's what I would do once corporate refused to release the records.
That's an interesting thought.