There would be no question of the reporters culpability had she not tried to gain access to information she had no legal right to access. Works both ways unfortunately.
They are both guilty of breaking various laws. Him for divulging info that shouldn’t have been. Her for asking for and publishing it. We can, and SHOULD, fault them for their criminal acts.
It’s been decades since I’ve been involved with sensitive info, but it was pretty clear that what I knew needed to stay with me, if anyone tried to get that info from me I needed to tell someone and just as importantly, I shouldn’t be asking for stuff I had no valid reason to know. Not rocket surgery.
They both need to fry to the fullest extent of the law.