The "leak" from the SEC was likely not actually what would be termed a leak, but rather an intentional release of information to make the party being investigated panic and thus further incriminate themselves by "digging up the bodies to move them", etc. It is this type of thing that can prove intent, which is required when trying to prove fraud.