Hello,
Don’t have an idea truly saying. You may contact your hosting provider to ask if they have any server logs about actions with your WP files.
Regards