This can be fixed by opening the patron's account in the ILLiad Client and clicking the 🔓Web Login Locked button.
For more information, see this Atlas document: Temporarily Block Web Users for Failed Login Attempts