MFA is only working at about 25% capacity across pretty much all of Salesforce's product portfolios (what they call "clouds"). Investigation of possible DDOS or other attack is ongoing, no ETA on a fix.