Just tell the guy that due to a recent leak you're not allowed to disclose what you're working on; oh but do tell him there is an investigation into it as the information leaked was inaccurate but definitely leaked from inside the company. After this tell him to keep quite about it all because the last thing you want is for the PHB to think that he is the leak now.