Weird happenings online

A patron was trying to order a flex package online. When trying to check out his credit card was declined. He attempted this order one more time and received the decline message again. When he logged into his credit card account online both charges were actually on his activity report. We have no record of any order in Tessitura or charge in his account. And there's no Incomplete Credit Card Charge in the report. I noticed that his account does not have an address. I think he may have changed it today according to the audit. The account used to have an address. 

I'm not sure how to read the audit for today completely. 

It says 

USER ID     ACTION   COLUMN   OLD VALUE    NEW VALUE

webapi        inserted                                               341556

webapi        inserted                                               341557

 

There's no column or old value identified. And what is the new value? They aren't patron ids. They aren't in the system. Could they be system table columns? 

Any help to solve this weird mystery would be appreciated.