The source was the article in the WSJ itself, which then referred to their source at the Anthropic. Which kind of is a textbook definition of "leak". Because otherwise Anthropic would have their lawyers hunting both the employee breaking their stringent NDA and the WSJ as well...