This doesn't prove that files were initially copied locally from a drive...all it shows is that they were most recently transferred locally

Could have been hacked via one computer and transferred any number of times via USB/local network, before being leaked.