Perhaps I am naive but I think the apology should come after the internal investigation.

It is more likely that you just have an administrator that became aware of the issue, they won't make an apology until they understand what happened.