Forward secrecy does not protect the data for which the key was leaked (which could be at-rest data), it only protects future transmissions.