Problem was solved by correcting the dialplan (adding sanity checks for login attempts) - Users were able to login with blank extensions (it happened sometimes by mistake). When they corrected their error and logged in properly, it caused strange results.
Bottom line: all solved. Thanks for taking time & looking into it, Nicolas. Keep up the good work.