So this is obviously terrible stuff, but for once I feel that the leaking party isn't the only one at fault here. Seems like a government agency (shocker) was breached first, and then thus breach was used to appear more legitimate in the next attack.