Because our privacy policies state that we won't disclose personally identifiable information about users, and IP addresses can be personally identifiable.
Unfortunately security incidents happen, but we won't violate the commitments we have made to our users; in this case, if we revealed the IP addresses we would have another, deliberate information leak on our hands.