How is a leak found?

The 'leak' has to be provided unique information that, at the time, may appear to be able to steer policy.