Where do leaks come from?

I’ve seen that some unofficial leaks have come from Magic con, and some from pre-emptive listings online, but where do the new cards / commander leaks come from?