The "leak" from the SEC was likely not actually what would be termed a leak, but rather an intentional release of information to make the party being investigated panic and thus further incriminate themselves by "digging up the bodies to move them", etc. It is this type of thing that can prove intent, which is required when trying to prove fraud.
Coinfire also said at the time they had attorneys guiding them as to what they could legally release ALSO its not the first time they posted something about GAW and got hacked/Dos'ed shortly after.