From what I’ve heard, it wasn’t released, they were uploaded and it’s url kept private. Imo they probably did that to send it to a few highly ranked people so they could check if they agreed with the censorship before releasing them. However, the URL for those to-be-released files were easily guessed based on the pattern of the previously already public ones.