It could be that the leaks were not serious enough for discipline, or were accidental enough that management thought that lesser discipline would be enough that it would not happen again. We really don't have enough information to begin to know.