Should it be - it's the responsibility of the owner to secure their private information? If it gets leaked, the case is against those who leaked it - not the journalist - unless that information is of Public Interest.