Is my camera hacked?

Twice in 2 days, I’ve noted an internal battery stick up camera blue light illuminate and remain on. Yet in the app history, the camera has not shown as recording nor can I see evidence of the camera in action. At the time I’ve identified the light on the first time, I logged into the camera and closed the feed. The 2nd time, I couldn’t connect and had to remove the battery to kill the camera. As two different cameras have been “caught” doing so in 2 days when they’re set to “home mode” and not meant to be on, and given I use ring 2 step authentication to alert to any log in, I’m wondering if there is some sort of security breach occurring that’s circumventing Ring security settings or a simpler explanation. I’ve always trusted the 2 step authentication so curious to see if there’s another explanation. Both cameras remained on for minutes until killed despite being set to record for only 30 seconds making me wonder if someone is watching in and able to log in without initiating the 2 step authentication or app alerts. I tested a different phone and security systems for logging in worked as designed and prevented access without alerting me.