We have identified the storage exceeding to be linked to our cloud service and a missing configuration to auto delete trashed files after a set amount of time. We updated the config and are monitoring monitoring this to be resolved.
This incident has been resolved, all systems are operational again.