When I worked in the civil service we were trained to use that phrase to any query, no matter how innocuous (unless we had permission to give more info).

You may think that not issuing a categorical denial is suspicious, but generally speaking you cannot infer any information from that response. If it was only used when really bad things might have happened, maybe you could infer more.