By six that evening, Bellmont Hospitality’s headquarters no longer felt like an office.
It felt like an evidence room.
IT security occupied one conference area. Outside forensic counsel had taken over another. Procurement employees had been instructed not to access company systems until their credentials could be individually reviewed. The chief financial officer canceled a flight and returned from the airport. Two board members called Daniel within ten minutes of each other, both asking versions of the same question.
How bad is it?
Daniel gave both the same answer.
“We don’t know yet.”
He disliked the answer.
It was still the only honest one.
Rachel moved between rooms carrying an expanding list of preserved devices, employee interviews, system logs, and vendor files. At seven fifteen, she returned to Daniel’s office with Leo Park, Bellmont Hospitality’s head of information security.
Leo placed a laptop on the conference table.
“We recovered the archive.”
Daniel sat.
“All of it?”
“Probably.”
“Probably?”
“The deletion was logical, not destructive.”
Daniel looked at him.
“In plain English.”
Leo nodded.
“Someone deleted the visible directory. The underlying backup copies still exist because our disaster-recovery system takes immutable snapshots every four hours.”
Daniel released a breath.
“So why did someone bother deleting it?”
“They may not have known about the backup architecture. It changed eight months ago.”
Rachel sat beside Daniel.
“Who accessed the archive?”
Leo opened a log.
“Jonathan Marks’s credentials.”
“We know that.”
“There’s more.”
He enlarged several lines.
“His credentials accessed procurement files at 4:12 p.m., about thirty minutes after Vanessa arrived at Bellmont House.”
Daniel leaned forward.
“Where?”
“Headquarters.”
“Jonathan was here?”
“No.”
Rachel looked at Leo.
“Badge records?”
“Jonathan’s badge has not entered the building since yesterday.”
Daniel felt the shape of the problem changing again.
“Remote access?”
“No. Internal network.”
“So someone here used his account.”
“Yes.”
“Device?”
Leo turned the screen.
“Conference-room workstation on twenty-nine.”
Daniel knew the floor.
Executive administration.
Rachel’s eyes narrowed.
“Who can access that room?”
“Physically? Most senior staff.”
“Cameras?”
“Hallway only.”
“Show us.”
Leo opened the security footage.
The time marker read 4:05 p.m.
People moved through the corridor.
An assistant carried folders.
A finance director entered another room.
At 4:09, a man appeared at the far end of the hallway.
Paul Harris.
Daniel stared.
Paul entered conference room B.
At 4:17, he came out.
Nobody spoke.
Daniel felt something hollow open beneath his ribs.
“Where is Paul now?”
Rachel checked her phone.
“Regional office.”
Daniel looked at Leo.
“Could he have used Jonathan’s credentials?”
“If he knew them.”
“Did he?”
“We don’t know.”
Daniel stood.
Rachel said, “Don’t call him yet.”
He looked at her.
“Why?”
“Because we preserve first.”
Daniel knew she was right.
He hated that she was right.
Paul had worked beside him for twelve years.
Paul had admitted missing Caleb’s complaint.
Paul had sat in the board meeting while Daniel argued for wider audits.
Paul had looked ashamed.
Now the security footage placed him alone with the computer that deleted a procurement archive.
Daniel began walking toward the door.
Rachel stood.
“Daniel.”
“I’m not calling him.”
“Where are you going?”
“To ask Leo what else we have.”
Leo looked slightly alarmed.
Daniel stopped beside him.
“Show me every system action from that workstation.”
Leo typed.
The workstation had accessed three directories.
Vendor exception approvals.
Regional authorization logs.
Historical procurement correspondence.
All three connected directly to the expanded audit.
“Anything downloaded?” Rachel asked.
“Yes.”
“How much?”
“Approximately 3.8 gigabytes.”
“To where?”
“Encrypted external drive.”
Daniel closed his eyes for half a second.
“When?”
“Before deletion.”
Rachel’s voice became colder.
“So someone copied the records before removing the visible archive.”
“Yes.”
Daniel looked at the footage again.
Paul entered.
Eight minutes later, Paul left.
“Could another person have been inside already?”
“Possible.”
“Camera at the other entrance?”
“There is no other entrance.”
“What about someone entering before the footage segment?”
Leo rewound.
Nobody entered for twenty minutes before Paul.
Daniel sat again.
He did not want to construct excuses.
He also did not want to convict a man based on one camera angle and a login.
“Freeze Paul’s system access.”
Rachel nodded.
“Already done.”
Daniel looked at her.
“When?”
“Thirty seconds after I saw the footage.”
Despite everything, he appreciated her.
“His company phone?”
“Preservation request has been sent.”
“Car access?”
“Not relevant unless we have reason to believe physical documents are involved.”
Daniel nodded.
Leo’s phone vibrated.
He read the message.
“We have something.”
“What?”
“Jonathan Marks just called security.”
Rachel looked up.
“From where?”
“Airport.”
“Which airport?”
“International terminal.”
Daniel felt anger sharpen.
“He’s leaving?”
“He says he is flying to London for a supplier conference.”
Rachel’s expression made clear what she thought of that coincidence.
“Was the trip scheduled?”
Leo checked.
“Calendar entry created four days ago.”
“Ticket purchase?”
“We don’t have that yet.”
Daniel asked, “Can we stop him?”
Rachel answered immediately.
“Not without legal authority.”
“Can we tell him he’s required for an internal investigation?”
“Yes.”
“Do that.”
Rachel called Jonathan.
He answered on the third attempt.
Daniel listened on speaker.
“Rachel.”
“Jonathan, I need you to postpone your travel and return to headquarters.”
A pause.
“I’m already through security.”
“This concerns a formal internal investigation.”
“What investigation?”
Rachel looked at Daniel.
“Procurement controls.”
Jonathan laughed softly.
“You don’t need me for that.”
“We do.”
“My conference starts tomorrow.”
“We are directing you as a company executive to remain available.”
Another pause.
“Is this about Vanessa?”
Rachel did not answer.
Jonathan continued.
“Because if she’s making accusations to save herself, you should remember who she is.”
Daniel felt disgust at how quickly the strategy appeared.
Discredit the weaker person first.
Rachel said, “Return to headquarters.”
“I’ll be back Friday.”
“That is not the instruction.”
“I have contractual responsibilities.”
“So do you.”
Jonathan’s voice changed.
“Is Daniel there?”
Daniel spoke.
“Yes.”
Silence.
Then Jonathan sighed.
“This is getting out of proportion.”
“Come back.”
“I’ve worked here nine years.”
“Come back.”
“You really think I’m going to disappear?”
Daniel looked toward the airport departure information Leo had opened.
“Then returning should be easy.”
Jonathan said nothing.
The call ended.
Rachel stared at the phone.
“He hung up.”
Leo checked another screen.
“His flight boards in forty minutes.”
Daniel asked, “Company-paid?”
“We’re checking.”
Rachel stood.
“I’m calling outside counsel.”
Daniel nodded.
There were limits to what the company could compel.
But there were fewer limits to what it could preserve.
“Lock every system he can access.”
“Already happening,” Leo said.
“Vendor payments?”
Rachel looked at Daniel.
“Freeze nonessential procurement payments until review.”
“Do it.”
At eight thirty, Paul Harris called Daniel.
Daniel watched the phone ring.
Rachel was still in the room.
“Answer,” she said.
He did.
“Paul.”
“What the hell is happening?”
Daniel kept his voice neutral.
“What do you mean?”
“My access is disabled.”
“Yes.”
“Why?”
“There was unauthorized activity involving procurement archives.”
Silence.
Then Paul said, “And you think that was me?”
Daniel looked at the security image on Leo’s laptop.
“I want to ask you where you were at 4:10 this afternoon.”
Another pause.
“Headquarters.”
“Twenty-ninth floor?”
“Yes.”
“Conference room B?”
“Yes.”
Rachel watched Daniel carefully.
“What were you doing there?”
“Printing regional staffing reports.”
Daniel looked at Leo.
Leo silently shook his head.
No print jobs had been logged.
Daniel continued.
“From which computer?”
“The room workstation.”
“What did you access?”
“Email.”
“Nothing else?”
“No.”
Daniel felt his disappointment deepen.
“Paul.”
“What?”
“The workstation logs show procurement records were accessed while you were in the room.”
Silence.
Longer this time.
Then Paul said, “Daniel, I didn’t delete anything.”
“I didn’t say delete.”
The silence became absolute.
Rachel closed her eyes.
Daniel felt the betrayal settle.
“How did you know something was deleted?”
Paul breathed out.
“I heard from someone.”
“Who?”
“No one important.”
“Name.”
Paul said nothing.
“Who told you?”
“I can explain.”
“That would be useful.”
Another pause.
“Jonathan called me.”
Rachel wrote immediately.
“When?”
“This afternoon.”
“Before you went into the conference room?”
“Yes.”
“What did he ask?”
“He said procurement was in panic because you were expanding the audit. He said some old files were duplicated and needed to be copied before IT changed permissions.”
Daniel looked at Leo.
“Did he give you his credentials?”
“Yes.”
“And you used them?”
“Yes.”
“Why?”
“Because he said the records might disappear during migration.”
Daniel stared at the table.
“Did he ask you to delete anything?”
“No.”
“Did you delete anything?”
“No.”
“Did you copy files to an external drive?”
“Yes.”
Rachel looked up sharply.
“Where is the drive?” Daniel asked.
“With me.”
“What did you intend to do with it?”
“Give it to Jonathan.”
Daniel felt anger finally break through.
“Why?”
“Because he asked.”
“Why would a procurement executive need a regional director to secretly copy files from a conference room using his credentials?”
Paul’s voice tightened.
“When you say it like that—”
“How else should I say it?”
“I wasn’t thinking.”
“No.”
Daniel stood.
“You were thinking. You were thinking Jonathan was someone you trusted.”
Paul went quiet.
Daniel continued.
“You did the same thing with Vanessa. Employee complains, Vanessa explains, you trust Vanessa. Inventory issue, Vanessa explains, you trust Vanessa. Jonathan asks you to bypass normal access using his credentials, you trust Jonathan.”
“Daniel—”
“And every time your trust replaces verification, someone else carries the risk.”
Paul’s breathing became audible.
“I didn’t delete the archive.”
“I believe that’s possible.”
“You think I’m part of this?”
“I think you copied restricted files without authorization.”
“He said they were his files.”
“They’re the company’s files.”
Paul said nothing.
Daniel sat again.
“Bring the drive to Rachel.”
“Tonight?”
“Yes.”
“I’m ninety minutes away.”
“Then give it to outside counsel at the regional office. Rachel will arrange custody.”
Paul exhaled.
“Am I suspended?”
Daniel looked at Rachel.
She nodded.
“Yes.”
Paul went silent.
“Effective immediately,” Daniel said. “Pending investigation.”
“You’re suspending me after twelve years?”
“I’m suspending you because twelve years cannot become permission to ignore what happened today.”
“You know me.”
Daniel closed his eyes.
“That’s exactly the problem.”
The call ended five minutes later.
Paul agreed to surrender the drive.
Daniel remained at the conference table after Rachel left to coordinate collection.
He thought of the first night at Bellmont House.
He had believed the clearest dividing line was between Vanessa and everyone she had mistreated.
Now the lines were everywhere.
People who did wrong.
People who enabled wrong.
People who missed warning signs.
People who trusted the wrong colleagues.
People who benefited without asking enough questions.
At nine twelve, Leo returned.
“Jonathan boarded his flight.”
Daniel looked up.
“Despite the directive?”
“Yes.”
“Destination?”
“London.”
Rachel entered behind Leo.
“He also emailed a resignation from the plane.”
Daniel stared at her.
“Effective?”
“Immediately.”
That told them almost everything without proving anything.
Rachel put a printed email on the table.
Jonathan’s resignation was four sentences long.
Personal reasons.
Immediate effect.
Grateful for opportunities.
Future correspondence through counsel.
Daniel almost laughed.
“He already has counsel.”
“Apparently.”
Leo looked toward the screen.
“We found who deleted the archive.”
Daniel straightened.
“Not Paul?”
“No.”
“Then who?”
Leo displayed the workstation logs more precisely.
Paul had logged in using Jonathan’s credentials.
He accessed the files and copied them.
At 4:17, Paul logged out.
At 4:19, another session began remotely through an administrative management tool.
Same workstation.
Different account.
Jonathan’s IT-delegated procurement admin credential.
Rachel frowned.
“He could remotely manage the workstation?”
“Limited procurement administration. Legacy permission.”
“From where?”
Leo brought up the network record.
“Airport lounge Wi-Fi.”
Daniel stared.
Jonathan had asked Paul to copy the files.
Then, after Paul left the room, Jonathan remotely deleted the visible archive himself.
Paul had been used.
Again.
But he had also made himself usable.
Daniel leaned back.
“Can we prove the remote session was Jonathan personally?”
“Credential plus multifactor approval to his company phone.”
Rachel nodded slowly.
“That’s much stronger.”
Daniel looked at her.
“Notify outside counsel. Preserve carrier records if legally available. Coordinate with law enforcement only through counsel.”
“I will.”
Leo began to leave.
“Wait,” Daniel said.
Leo stopped.
“Who told Jonathan about the audit?”
“We don’t know.”
Daniel looked at Rachel.
“Paul?”
Rachel shook her head.
“Paul says Jonathan called him first.”
“Could Vanessa have told Christopher, who told Jonathan?”
“Possible.”
Daniel remembered Vanessa’s wording.
Jonathan says Mercer is opening everything.
The leak might have traveled through Vanessa’s brother.
Or from headquarters.
Or both.
“Keep looking,” Daniel said.
After Leo left, Rachel sat down.
“You need sleep.”
Daniel ignored that.
“What’s on Paul’s drive?”
“We’ll know soon.”
At ten forty-three, the regional outside counsel uploaded a forensic image.
Rachel and Daniel reviewed the directory.
Most files matched the recovered procurement archive.
One folder did not.
It was titled EXEC-PRIVATE.
Daniel frowned.
“That wasn’t on the server directory Leo showed us.”
Rachel opened the metadata.
“It was hidden.”
“Open it.”
Inside were spreadsheets tracking vendor payments.
Names.
Amounts.
Internal sponsors.
And a column labeled REF.
Rachel scrolled.
Several rows used initials.
JM.
CC.
LK.
PH.
Daniel’s heartbeat increased.
Then one set of initials stopped him completely.
DM.
Rachel went still.
“Daniel.”
He stared at his own initials.
Three vendor transactions carried DM in the sponsor column.
Northline Build Advisory was one of them.
Daniel read the amount.
Two hundred eighty thousand dollars.
Another.
One hundred ninety-five thousand.
Another.
Three hundred ten thousand.
Rachel looked at him.
“Did you sponsor Northline?”
“No.”
“Ever meet them?”
“No.”
“Approve them?”
“Not knowingly.”
Rachel scrolled right.
The comment field read:
Owner priority. Expedite.
Daniel felt something colder than anger.
Someone had been using his name.
Not merely exploiting gaps in the organization.
Invoking the owner to silence questions.
“How many approvals carry my initials?” he asked.
Rachel counted.
“Nine.”
“Total value?”
She calculated.
“Just over 2.4 million dollars.”
Daniel stared at the screen.
For six months, he had asked how Vanessa operated so long without being stopped.
Now he had part of the answer.
People had not merely trusted managers.
They had been told some decisions came from him.
And because he rarely involved himself in daily procurement, nobody had asked him whether that was true.
Daniel looked at Rachel.
“Find every person who was told I approved these vendors.”
She nodded.
“And Rachel?”
“Yes?”
“No one clears me because I’m the owner.”
She held his gaze.
“I wasn’t planning to.”
“Good.”
Because for the first time since this began, Daniel was not only investigating what others had done under his company’s name.
He was about to learn how many people had obeyed bad decisions because they believed those decisions came from him.
Click here to continue reading: PART 11: Daniel’s Own Name Appears Throughout the Scheme, and Employees Reveal How False Executive Orders Silenced Questions Long Before Vanessa Ever Challenged Him
A Quiet Dinner Turns Uncomfortable When One Manager Decides Daniel and His Daughter Do Not Look Like the Guests She Wants
Part 10 of 15
