I don't even know if that can be considered a LEAK. They flat out published the info on the site. With a link and everything.
And then they had the nerve to call it a "website vulnerability".
Even beyond that, the majority of the current problem lies in the fact that after they were notified of the issue (before the story was made public), all they did was remove remove the link on the site but DIDN'T FUCKING DELETE THE FILE so people who knew what to look for/how to look for it could still find it and download it. That's when the shit really hit the fan and the data got passed around.
The ESA must get their knowledge of how the internet works from Nintendo.