Closed incidents showing when "Active" is true filter

[Adil N]

I have 3 "Closed" incidents which show up when i use the "Active is True" filter condition - any reason why this is the case? these should not show as active 

[Adil N]

I can see that they are showing as "True" but not sure why this has happened? they should show as false as previous but for some reason this seems to be happening today. And security restrictions suggest we cannot change them 

[Sandeep Rajput]

@Adil N Please open these incidents and in the activity stream please check who changed the value for this field. Also, you can check the record history and see when and who made changes to this field.

Hope this helps.