I'll grant that it could also be related to some way the files were prepared in the interim, but it is at least worthy of considering where that metadata might have come from or been replaced through normal activity or intentional operations.