Who is leaking?

Already there appear to be leaks as to what is in the final Auditor-General’s report. Now this is curious as unlike the draft report which went to 120 people, there are, from what I can tell, only two copies of the final report.

One is held by the Auditor-General and one is held by the Speaker.

So if there are leaks, which one is leaking?