Royal commentators generally know which side have leaked details, due to where the story first appeared and the name of the journalist who first wrote the story.
This indicates it was H&M side who leaked.
A stay at BP or St James has always been offered to Harry, but so far, he has preferred to stay in a hotel.
It is not that he thinks BP is less secure, but he does not want the BP officials knowing when he comes in or out.
Their brand has always been 'Trash the Royal Family; call them racists; especially trash Catherine, etc, reveal lots of nasty gossip about them', revealed to the media in an Oprah Interview, a Netflix series, a Book, Spare, accompanied by many interviews, and make sure you mention how trash the RF is at eevry other opportunity, such as the wearing of 'pantyhose' (tights), etc
They always wanted to 'monetise' their connection to the RF, and this is where the late Queen said you cannot be half in and half out. They wanted to cherry pick RF events, and monetise the rest.
Monetising has always been a problem for 'non-working' royals, but unworkable if half in and half out.
I am sure the RF will forgive Harry, if not already, but once trust has gone, it is difficult to repair that damage.