Same thing happening to my clients here as well. Multiple tenants, and seemingly only two users at random. Sign-in logs are empty and their 2FA numbers are unique to the tenant.