You say the behavior is reproducible. It is possible to do so in a new, smaller, version with no sensitive client information? That would help a lot in trying to figure out what may be happening.