In my mind, the difference would be that a legitimate whistleblower, acting in good faith, reports their concerns to an appropriate outlet so the information can be vetted and investigated. Dumping information on the internet for all to see does little good, and I don't consider that to be legitimate whistleblowing, unless that person has already tried the appropriate authorities and/or responsible media. Releasing confidential info to the public can be irresponsible and have negative consequences for national security, or a business's ability to operate. But reporting unethical behavior through appropriate channels can and should be protected.