Probing Cross-Tenant Retrieval Leakage