The request for the user's details from the government doesn't allege illegal leaking of information, so why is that relevant?
If it's not a legal matter, is it the DHS trying to find and discipline the employee(s) for the alleged deeds?
Certainly the governments lawyers aren't morons. Had they had such an easy route to take they wouldn't be attempting to misuse the law this way.