Return data action returns single item but null for a list of the same data type

You say exact same search, but just wanna double check: you’re using the exact same constraints on both? The workflow can ignore privacy rules, but the return data will still honour it (you probably knew this). But if you search for an existing thing by unique ID, it’s technically a lookup, and not a search.