This statement has very serious implications: According to a trusted source in the security community, that email account was somehow compromised in 20

This statement has very serious implications: According to a trusted source in the security community, that email account was somehow compromised in 2013. The source said the account was full of emailed reports from a keylogging device ... If I understand "security community" to mean law enforcement or intelligence agencies, that means they are sharing data from surveillance of private individuals with journalists. This suggests that assurances about the security of that data and the integrity of their processes are not reliable. Who else is given this data? You may like Krebs and think it's justified, but who decides whose private data is ok to leak? What about your private data?