LLMs are really good at repeating text that they've just seen. Very occasionally they'll mix up a word or two, but it's not at all challenging for them to regurgitate text from a previous section of input.
I have yet to see a documented example of a system prompt leak that was NOT the real system prompt. Have you seen one?