If the files were deleted best bet is to use a file recovery app, like UFS explorer.
Most common are the user share copy bug, being hacked, misconfigured docker/app, etc
That wouldn't help with the actual problem, i.e., the cache being full, but it wouldn't cause any issues with the array data, those actions only affect the cache filesystem.