“Words like 'investigate' and 'leaks' signal misconduct concern. Emphasis on unauthorized disclosure of private financial data creates worry about privacy breach and potential regulatory violation.”