A quick whois [1] against the original link by used by Cryptome suggests possible origin of leak is Phillip Bailey[2]. If /xyz/ existed within the contingency torrent which was released to the pirate bay (someone else confirm please :) then that suggests that he was just hosting a HTTP mirror of the torrent; if it doesn't exist then who knows how deep the rabbit hole goes?
A number of people have speculated that cables.csv == insurance.aes256 or whatever its called, due to the similarity in filesizes. Doesn't the insurance file predate the embassy cables affair though?
http://webcache.googleusercontent.com/search?q=cache:NFOMuKV...
[1] http://whois.domaintools.com/193.198.207.6[2] http://cryptolife.org/index.php/Main_Page