Leaked links included loan applications with the requested amount, bank transaction details, a real estate investor’s internal performance report and a corporate revenue doc intended for the CEO.