Recently, we noticed there are 4 files being constantly exported to var/export. It contains what appears to be billing/payment info for customers - even though our Magento store doesn't store any credit card information.

We've confirmed with our host that these files haven't been accessed by anyone via the logs, but no matter what we do - deleting them, renaming var/export - they are still being constantly generated with the same file name and new entries are being recorded into it.

We didn't notice any recently modified php or phtml files that would indicate a hack, not sure how to trace to the source of the problem.

Does anyone have an idea on how to check what is causing these csv files to be generated? Could it possibly be some bug or something?

closed as off-topic by benmarks Feb 14 '15 at 22:55

This question appears to be off-topic. The users who voted to close gave this specific reason:

  • "Questions describing a problem that can't be reproduced OR seemingly went away on its own (or went away when a typo was fixed) are off-topic as they are unlikely to help future readers." – benmarks
If this question can be reworded to fit the rules in the help center, please edit the question.

  • could you please give us the names the files have? this could help us identify the issue. – Flyingmana Jan 7 '15 at 22:57
  • Yes, the file names are always export_274_prod.csv and export_mage274.csv – Terry2015 Jan 7 '15 at 23:11
  • I don't know such files. The names looks weird... – Kirby Jan 8 '15 at 1:52
  • The names look custom to me. Could it be that someone has created a custom script on your site to make these exports? – Jisse Reitsma Feb 13 '15 at 15:33
  • same issue - did you ever resolve? – Haim May 30 '16 at 20:52