I've had two users that came back to their phones finding they had missed MFA prompts at 4am (not on the same day). Digging into the logs (PC and Azure) I see nothing unusual, just that in both cases ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results