Actually, I just realized that it DID track the change.
I went into CBSubs | Subscriptions
I found the username of the user and viewed their subscription entry.
Clicked on the Change Logs number to view the History and Logs for that subscription
Last 2 entries:
1 08/02/2018 - Change log - User subscription deactivated with status Expired - User subscriptions - 605 - update - System - <Full name blank> - IP: 52.71.192.87,52.71.192.87 - info
2 09/13/2017 - Change log - User subscription activated as Renewed - User subscriptions - 605 - update - <username> - <User's full name> - IP: User's IP address - Info
And when I hover over the 'update' in the change column of the last entry (8/2/2018) it shows:
previous_expiry_date | 2017-09-09 21:16:16 | 2018-08-02 15:12:00
previous_status | X | A
status | A | X
So the main question is - who is 'System' (with an IP address at an Amazon server) and how/why could they change a subscription date?
AND ... in looking at the entire History and Logs view, I'm seeing a number of 'update' entries that have the Username 'System'. But they have different IP addresses than the entry above (one registered to a company in Argentina ... which is NOT our country).