At a minimum he allowed someone in his command to leak it and did not manage his command appropriately.
At max he also knowingly released claassified operational security information.
If he leaked it he needs court-martialed.