Just had a follow up from Ted. He says that legal received a complaint but ignored it, and perhaps the leak vector was via historical whois data. Historical whois data says otherwise. Hard to draw a firm conclusion apart from the facts.