I don’t think it is pedantic to say that they can confirm it based on their own intelligence which could conceivably be that their hacker-spies had previously exfiltrated the same documents from the original (or another) legitimate source so they already had copies of the same emails that they were confident were legit.
Whether you believe them to be truthful is a different, but obviously related, question.
