Random notification “An iPhone now has access…”

Hello everyone!

Over the past few years, we have randomly received notifications stating that a device has either signed into iCloud or was “Added to Your Account”. We also receive emails that state the same message. Unfortunately, the notification and email never gives the name of the device, the IP, the location, or any information that I can use for recognition or to rule out potential security concerns. The image below is a screen shot of one such message.

When we go into settings, or when looking on iCloud, there are only the same devices that were always there - nothing new was listed. (On a side note, I also learned from this experience that not all linked devices show up on those lists every time - sometimes a device is not listed even though it is linked to the account).

The notifications occur during times when devices are on but aren’t being used. They do not just occur after updating, but also when no new updates are needed for the OS, nor for the App Store. We have verified that this occurs about once a month and the notification message is usually seen on more than one device (same message with no actually useful information, and on both iPhones and iPads of various ages).

We have changed passwords thinking it was a potential security concern, but no effect.

So now I’m asking the community if anyone knows of a way that I can identify what device caused the notification. Is there some log that I can dig up? Can I troubleshoot this some other way? I was an IT professional for a few years, so I’ve looked through quite a bit before getting to this point…

I do find it rather ironic that the message states “If you don’t recognize this device you can remove it in settings.” But it never provides information that can be used for recognition, so how could I possibly recognize it? 🤷🏽‍♂️

Any ideas? Your thoughts are greatly appreciated.