Assange is not American. Thus he is not bound by American laws. This does not change the legality of the acts in regards to the American citizens who leaked the information to him.

Some of those acts were criminal, some were not. Some were (non-criminal) violations of contracts they signed with their employer or as a condition of their security clearance.

New details keep coming out every day. It's too early to say with any authority what happened.