Can someone explain how the data was retrieved on this specific date?

Hmm, I’ve seen this happen before. If the data was retrieved on 10/15 but there’s no clear trail, it could be a scheduled job or even a third-party tool.

I’d recommend using Datadog or New Relic to monitor your systems. They can track API calls, scripts, and even manual dumps.

Also, double-check your access logs. Sometimes the simplest stuff gets missed.