I think it is far more defensible than illegally collecting this information and making the leak necessary and required in the first place. Since there are no repercussions for the latter, I don't see how you could call it indefensible. Since allegedly nothing happened.