I just noticed that my clients tenant has a new site collection http://xxxx.sharepoint.com/sites/CompliancePolicyCenter1, there is also the original center with the same url but without the 1 at the end. When I looked in the Audit Log, I see that it was created by app@sharepoint and that there was a second event one minute after the first that created another site collection http://xxxx.sharepoint.com/sites/CompliancePolicyCenter2 (but this does not show up in the SP Admin Center).
Does anyone have any idea what could have caused this?
