The only way to determine what happened, which may not be conclusive, is to examine the files on your server. You wold need to get your consultant to do this.