As Nigel has mentioned, setting ports as inputs and leaving them open will cause the processor to draw lots of current.
If you are going to leave unconnected pins, set them as ports. If a pin is always an input, use a 10k resistor to ground.
I have used several Microchip controllers, and when properly set up the current draw in sleep mode is lower than what can be measured with even a good handheld DMM.
One requires a bench top DMM with sub micro amp resolution to measure it.