It likely didn’t really leak. It’s a trick/scam they play on the naive. One can replace the cleartext section in the wallet with a unrelated tx reference that d

It likely didn’t really leak. It’s a trick/scam they play on the naive. One can replace the cleartext section in the wallet with a unrelated tx reference that doesn’t match the actual encrypted private key. The wallet will act like the real one (it will show the referenced tx in the UI) but even if you could decrypt the encrypted private key, it would be for the wrong pubkey.