Just to confirm the field names: are you talking about UserCreated and LastLogon?
select UserCreated, LastLogon, * from cms_user
.
It is really weird, but I would assume there is a mix between UTC and local times, but I haven't seen that. Probably you need to raise this issue with the support.