Yeah. My guess is 3rd Party provider is AWS S3 and a DB backup was accessed.