Thank you Frank, just saw your reply and exactly the path I was following.
Having restored the vCenter post-incident before anyone else could get a look at it drastically hinders our ability to identify what exactly occurred.
Having a look at the ESX /var/log/vpxa.logs for timeouts and backtraces now
None of the ESX vpxa.log files go back far enough to provide any valuable information.