She may have been a security risk, but that still does not exonerate whoever leaked the fact that she was covert (if anyone did). The primary purpose of this law is not just to protect her, but to protect her contacts, as well, who might very well still be in the field.
On the other hand, if no one intentionally leaked the fact that she was covert, then there is no crime.
She was NOT covert. There is a time limit on how long the rule is applicable and she was past the time limit. There was no crime!