The security group name was changed recently however every now and then the Name gets reverted back to what it was earlier.
The last updated by is showing under admin account however no user has logged in as admin. So this should be happening via a process or job.
Use the below query to identify which process (gel script) has the Security Group ID in it and check the process script.
select distinct d.id as PROC_DEF_ID,
v.id as PROC_VER_ID,
from bpm_def_processes d
join bpm_def_process_versions v on d.id = v.process_id
join bpm_def_stages g on g.process_version_id = v.id
join bpm_def_steps s on s.stage_id = g.id
join bpm_def_step_actions a on a.step_id = s.id
join cmn_custom_scripts gel on gel.id = a.script_id and lower(gel.script_text) like '%security_group_id%'
join cmn_captions_nls ld on d.id = ld.pk_id and ld.language_code = 'en' and ld.table_name = 'BPM_DEF_PROCESSES'
AND v.user_status_code = 'BPM_PUS_ACTIVE'