They published the postmortem, and the penetration into colleges is hinted at as being causal.
> Increased load on DUO1 due to significantly increased adoption and simultaneous peak usage across multiple larger customers led to authentication failures.