You are correct. 

It is generally the policy of securities commissions, professional organizations, etc., not to disclose or confirm ongoing investigations, or the results of investigations, unless charges or punitive actions result. If there is not sufficient evidence to result in charges or punitive actions the files are closed and not made public. In some cases it is not even disclosed that an investigation took place. 

This is to both protect the individuals, companies, investors etc., from unsubstantiated rumours, speculation, falsehoods, etc., that might unfairly or unreasonably affect the aforementioned.

The only way one *might* be able to obtain information about suspected activities of regulatory bodies could be through navigating freedom of information legislation, if any exists.