The leakers themselves claim it was from iCloud (the actual leaker only bought it online from various hackers though, again according to him).