Is there a last modified date on the incidents? Maybe the user changed the status again after setting it to postponed.