Chapter 3 - Six Months of Silence

Marcus called the bank before anyone moved.
He identified himself, verified two security codes, and ordered the pending transfer frozen.
The bank representative hesitated.
“Mr. Reed, this payment was authenticated through an approved executive device.”
“I understand.”
“Do you believe the device is compromised?”
Marcus looked at Richard.
Then Vanessa.
Then Darnell.
“Yes.”
He hated saying it.
“Treat every executive payment credential as compromised until we tell you otherwise.”
The representative placed a temporary hold on all external transfers above twenty-five thousand dollars.
Marcus then called Reed Meridian’s outside counsel, Simone Price.
She answered on the second ring.
“Marcus?”
“I need you at headquarters.”
“It’s midnight.”
“I know.”
“What happened?”
“Payroll theft. Possible wire fraud. Possible executive credential compromise.”
Silence.
“I’m leaving now.”
Marcus ended the call.
Darnell remained seated.
He looked smaller than he had behind the security desk, but not weaker. Marcus realized the difference mattered.
Darnell was not frightened by executives.
He was exhausted by the cost of being ignored.
Marcus sat across from him.
“You said you contacted payroll support.”
“Yes.”
“Do you still have the message?”
Darnell took out his phone.
“I don’t delete financial stuff.”
He searched.
Then handed Marcus the device.
There it was.
April 11.
Darnell had written:
My deposit has been reduced again. Can someone explain “advance recovery”? I never requested a company advance.
The reply arrived three hours later.
Your account has been reviewed. The deduction is valid under executive-approved recovery policy. No action is required.
The response was signed PAYROLL SERVICES.
Richard said, “Who handled that ticket?”
Vanessa logged into the support archive using the isolated laptop.
She searched the case number.
The ticket had been reassigned twice.
Initial reviewer: payroll associate.
Second reviewer: Vanessa.
Final closure authority:
EXEC-FINANCE.
Marcus looked at her.
“You saw this?”
Vanessa shook her head.
“I saw the ticket number in a queue. It disappeared before I opened it.”
Richard checked the audit trail.
“Someone removed your assignment after eleven minutes.”
“Who?”
Richard expanded the event.
The user account was generic.
FINANCE ADMINISTRATOR.
Marcus asked, “Who can access that?”
Richard answered, “CFO, controller, system administrator.”
“Julian.”
“Yes.”
“Who else?”
“Calvin Moss, corporate controller.”
Marcus knew Calvin. Sixty-two. Careful. Quiet. Twenty years with the company.
“Call him.”
Richard did.
No answer.
Again.
No answer.
Vanessa looked uneasy.
“He normally responds to everything.”
Darnell took back his phone.
“What happens to us?”
Marcus looked at him.
“What do you mean?”
“The people whose checks were cut.”
“We restore the money.”
“When?”
Marcus almost said immediately.
Then Simone’s voice from years of legal meetings appeared in his head.
Do not promise numbers you have not verified.
“As soon as we calculate what each employee should have received, including corrected taxes.”
Darnell studied him.
“Company money?”
“Yes.”
“Even if you don’t recover what was stolen?”
Marcus understood the question.
“Yes.”
Darnell nodded once.
It was not gratitude.
It was acknowledgment.
That was appropriate.
Simone arrived at 12:36 a.m.
She wore black trousers, a wool coat, and the expression of someone who had already assumed the worst.
“No more opening files casually,” she said after Marcus summarized the situation. “We preserve everything properly. Richard, isolate logs. Vanessa, do not delete or access anything outside my direction. Marcus, nobody calls Julian yet.”
Marcus looked at her.
“He may be moving money.”
“Then we stop the money.”
“He may be my brother.”
“That’s exactly why you don’t call him.”
Simone asked Darnell to forward his April complaint to a secure legal account.
Then she examined the Northbridge records.
“Do we know who owns it?”
“No,” Marcus said.
She searched a corporate database.
“Delaware LLC. Registered agent service. Manager information not public.”
Richard said, “Convenient.”
Simone looked at him.
“Common, not automatically criminal.”
She clicked deeper.
Northbridge had been formed sixteen months earlier.
Two months before the first Reed Meridian vendor payment.
Simone asked, “What happened sixteen months ago?”
Marcus thought.
“We acquired Meridian Facilities.”
Richard nodded.
“That doubled our overnight workforce.”
Vanessa looked at the payroll spreadsheet.
“And added more employees whose schedules rarely overlap with corporate management.”
The implication settled over the room.
Someone may have seen the acquisition not as growth.
But as opportunity.
Marcus remembered the board meeting announcing the deal.
Julian had opposed it publicly.
Too much debt.
Too many low-margin contracts.
Too much operational exposure.
Marcus had pushed it through.
His father would have.
That was what Marcus had told himself.
Simone examined the payroll categories.
“Why these eighty-two?”
Richard began comparing employee data.
Age.
Department.
Tenure.
Direct deposit.
Overtime.
Complaint history.
Then he found a pattern.
“They all have something in common.”
Marcus moved closer.
“What?”
“No salary negotiation activity in the last twenty-four months.”
Vanessa added another filter.
“Most don’t use the employee financial dashboard.”
Darnell gave a humorless laugh.
“I didn’t even know we had one.”
Richard continued.
“Seventy-one receive paperless statements but never log in to open them.”
Simone stared at the screen.
“So somebody selected workers less likely to review payroll details.”
Marcus felt controlled anger turning into something colder.
This was not a mistake.
Not a sloppy scheme.
It was behavioral targeting.
Simone looked at Darnell.
“Did anyone ever ask about your financial situation?”
“HR asks about benefits.”
“Anything else?”
Darnell thought.
“Last year there was an employee wellness survey.”
Richard turned.
“What kind?”
“Questions about rent. Debt. Emergency savings. Whether you could handle an unexpected five-hundred-dollar expense.”
Vanessa whispered, “Financial resilience survey.”
Marcus remembered it.
Julian had championed the program.
He had presented it to the board as a way to design better employee benefits.
Richard searched archived survey documentation.
The vendor was listed.
COMMUNITY FINANCIAL WELLNESS PARTNERS.
Approved by the CFO’s office.
Data-sharing permitted for “aggregate workforce planning.”
Marcus stared at the phrase.
“Aggregate.”
Richard opened the access log.
Someone had exported individual-level responses.
Three weeks before Northbridge was formed.
The user who authorized the export had used Marcus’s own executive credentials.
Marcus stared at his name on the screen.
For the first time that night, the theft became personally terrifying.
May you like
Someone had not only stolen from his employees.
Someone had been operating as him.