Performed research into the customer's Entra sign-in logs and determined no compromise had occurred. We are unsure why the user's Microsoft Authenticator was pinged multiple times, but there is no evidence to show why and when it occurred.