That was likely it now that you mention it. I did have a problem awhile back where I fat fingered a 2:00AM cron job that was supposed to trim backup files to only keep the last x days of *.tar.gz files which filled the partition. I bet the file date reflects when that happened 🙂
Thanks again for the help and clarifying. Take care,
-bh