I guess they changed a phone number in the Active Directory to which the TFA-SMS was sent?