I think he meant that some malware could have been attached. No one really knows the source of the leak so it is a valid concern