Yes, with PFS, an attacker must obtain both the live session key and private key to decrypt data. Compromising the server does not expose past communications.