Chapter 6 - THE SIEGE INSIDE MY COMPANY
Northstar Cyber Defense had never felt vulnerable to me.
The building had reinforced entrances, segmented networks, biometric checkpoints, independent power systems, and a security staff trained by former federal agents.
Clients trusted us with evidence of intrusions they could not admit publicly.
We stored data capable of ending contracts and careers.
I had designed the facility to resist sophisticated attackers.
I had never designed it to resist my husband.
Ryan entered with Nolan’s badge.
He used copied credentials to reach the restricted floor.
He exploited emergency procedures he learned from me during years of conversations at our dinner table.
He knew that cutting power to the server room would trigger a controlled shutdown.
He also knew the backup generator required forty-three seconds to assume the full load.
During those forty-three seconds, certain magnetic locks released for fire safety.
At 8:14 a.m., Ryan used that window to remove the isolated drive containing the Baton archive.
Daniel called from the stairwell while security teams searched the building.
“He planned every movement,” Daniel said.
“Where are you?” I asked.
“Third-floor command station.”
“Are all employees accounted for?”
“Yes.”
“Any injuries?”
“One guard was struck near the loading bay.”
“How badly?”
“Conscious.”
“Ryan?”
“Gone.”
“Vehicle?”
“A delivery van.”
“Plate?”
“Stolen.”
Leah stood beside me in the mobile command vehicle outside my house.
My injuries made standing painful, but sitting still was worse.
“Did he take the only copy?” she asked.
Daniel answered through the speaker.
“The primary isolated drive is gone.”
“Backups?”
“Nolan configured the archive.”
“We have no verified duplicate.”
I closed my eyes.
Nolan had said the archive required two keys.
Ryan had one of the encrypted drives.
Investigators held the physical token from Evelyn’s baton.
Reed himself apparently carried the knowledge needed to unlock the second layer.
Each part of the truth was moving in a different direction.
“Check network traffic before the shutdown,” I told Daniel.
“For what?”
“Ryan needed to know the archive’s exact location.”
“He could not search every isolated rack in forty-three seconds.”
Daniel understood.
“Someone guided him.”
“From inside?”
“Or remotely.”
Leah contacted the forensic team.
Within minutes, they discovered a maintenance session opened thirty seconds before Ryan cut the power.
The session came from an administrative account belonging to Daniel.
“I did not open it,” he said.
“Where is your authentication token?” I asked.
“On me.”
“Has it left your possession?”
“No.”
“Then the session used a duplicate certificate.”
“That should be impossible.”
“So should a deepfake opening a bank account in my name.”
We traced the maintenance connection to a tablet inside Northstar’s executive conference room.
The room had been empty overnight.
Security searched it.
Taped beneath the conference table was a small wireless relay.
The device had been planted during Ryan’s visit the previous afternoon.
He had not gone to Northstar only to meet Nolan.
He had prepared the building for his return.
“How many systems did the relay access?” I asked.
Daniel reviewed the logs.
“Finance.”
“Personnel.”
“Security controls.”
“Executive communications.”
“Did it access client environments?”
“Not directly.”
“Did it copy my calendar?”
“Yes.”
Every movement I planned could be known.
Every meeting.
Every investigator.
Every attempt to stop the transfer.
“Destroy the relay after imaging it,” I said.
“No one uses standard company communication from this point forward.”
Daniel lowered his voice.
“Claire, the board is asking questions.”
“Which board member called first?”
“Harold Vance.”
I was not surprised.
Harold represented the private investment firm that purchased a minority stake in Northstar two years earlier.
He cared about security, but he cared more about contract stability.
“What did you tell him?”
“That we experienced an internal breach.”
“He already knows about the inspector general notice.”
“How?”
“It was sent to the board.”
The framing operation was accelerating.
At 8:26 a.m., Northstar’s directors received an anonymous package containing evidence that I had approved Patriot Meridian.
The package included bank documents showing me as Liberty Shield’s treasurer.
It included photographs of me with Evelyn at military events.
It included the synthetic video used to open the account.
It included a ledger portraying my monthly six-thousand-dollar payments as investments rather than family support.
The story was simple.
Claire Hayes had secretly financed a fraudulent charity.
She used her cybersecurity firm to approve an unqualified defense vendor.
When her accomplices became nervous, she claimed her credentials had been stolen.
Truth required explanation.
A lie required only arrangement.
“We need to brief the board ourselves,” Elena said.
“Not yet.”
“Silence allows the accusations to harden.”
“Talking before we understand the full breach gives them more material to twist.”
“Claire, they may suspend you.”
“They should.”
Elena frowned.
“If I were investigating this company, I would remove me from operational authority until my identity was secured.”
“That is not an admission.”
“It is responsible governance.”
“You built Northstar.”
“That does not make me larger than its controls.”
The decision hurt.
But I had spent years telling clients that no individual should be trusted beyond verification.
I could not demand an exception because the individual was me.
I called Harold.
He answered immediately.
“Claire, what the hell is happening?”
“My identity certificate was stolen.”
“Your husband broke into the building.”
“Yes.”
“Why?”
“I am cooperating with investigators to establish that.”
“The Defense Department has frozen two of our active approvals.”
“I know.”
“The board needs you on a call.”
“I will attend.”
“Are you denying the Liberty Shield records?”
“Yes.”
“Are you denying the video?”
“It is synthetic.”
“Are you denying the five-million-dollar transfer?”
“I am actively stopping it.”
Harold became quiet.
“Did you authorize it?”
“No.”
“Can you prove that?”
“Not yet.”
The honesty frightened him more than a polished denial would have.
“The board may place you on administrative leave,” he said.
“That is appropriate.”
“You’re agreeing?”
“I will not ask Northstar to violate its own insider-threat policy for me.”
A long pause followed.
“That may be the first reassuring thing I’ve heard this morning.”
“Harold, secure the board’s personal devices.”
“Why?”
“Because someone sent you evidence before law enforcement released anything.”
“You think the board is compromised?”
“I think someone wants the board to act quickly.”
“To remove you?”
“Yes.”
“Why?”
“Because they cannot transfer ownership while I retain control.”
Harold understood.
Northstar’s operating agreement required the founder’s approval for any sale involving defense assets.
If I were suspended under a misconduct provision, the board could appoint an interim executive with temporary authority.
Someone might use the scandal to replace me before Friday’s gala.
“Who becomes interim chief executive?” I asked.
“Our succession plan lists Daniel first.”
“And if Daniel is considered compromised because his credentials were used?”
“Nolan.”
“Nolan is missing.”
“Then the board selects an outside appointee.”
“Recommended by whom?”
Harold did not answer.
“Who submitted a candidate?” I pressed.
“Grant Caldwell.”
The gala organizer.
The owner of Meridian Strategic Events.
A board adviser had quietly nominated him six months earlier as an emergency executive consultant.
The same month my payments to Evelyn began.
Their plan had been built long before the baton struck my face.
“We need to cancel that nomination,” I said.
“Not without board approval.”
“Call the meeting.”
“It is scheduled for noon.”
“Who will attend?”
“All seven directors.”
“Remotely?”
“Five remote.”
“No.”
“What?”
“Do not hold a remote vote.”
“Claire, two directors are outside Texas.”
“Then delay.”
“We cannot.”
“You can if the voting platform is compromised.”
“Do you have evidence?”
I looked at the wireless relay photographed beneath our conference table.
“Yes.”
Harold agreed to move the meeting to a secure government facility under Leah’s supervision.
That decision disrupted one part of the plan.
It did not stop the rest.
At 9:02 a.m., Liberty Shield’s attorneys filed an emergency civil complaint against me.
They accused me of withholding pledged funds.
They attached the synthetic banking video.
They demanded the court preserve my company credit line.
At 9:17, a military-focused news site published an anonymous allegation that a Dallas cybersecurity executive had exploited wounded veterans.
At 9:31, three Northstar clients requested formal explanations.
At 9:44, one suspended our contract.
By ten, my face was appearing online beside Evelyn’s photograph.
Her television interview about Marcus Reed was being replayed as proof of her integrity.
My injuries were not mentioned.
The assault had not yet entered the public record.
Evelyn’s attorney issued a statement claiming she had acted in self-defense during a financial dispute.
Ryan was described as a traumatized former officer trapped between two emotional women.
I read the sentence twice.
Then I turned off the screen.
“Do not respond publicly,” Elena said.
“I know.”
“They are trying to provoke you.”
“I know.”
“You look like you want to break something.”
“I want to break the system they built.”
“That is legally different.”
Leah entered with an evidence report.
“The blood beneath the garage matches Marcus Reed.”
“Then Ryan lied.”
“Yes.”
“Any sign he died there?”
“No.”
“The pattern supports a head injury, but not necessarily a fatal one.”
“What about the vehicle that took Nolan?”
“Located near a warehouse in Grand Prairie.”
“Was he inside?”
“No.”
“The vehicle was burned.”
My stomach tightened.
“Blood?”
“None visible.”
“Cameras?”
“Disabled.”
“Any connection to Garrison?”
“The warehouse is leased by Patriot Meridian Logistics.”
The shell vendor.
Leah placed a photograph on the table.
Inside the burned vehicle, investigators found one object that survived.
A challenge coin.
One side bore Colonel Garrison’s unit insignia.
The other side had been scratched with a sequence of numbers.
I recognized the structure.
“It’s an encryption coordinate,” I said.
“For Baton?”
“Possibly.”
Leah gave me a look.
I almost smiled despite the pain.
“Now you’re doing it.”
“Evidence first.”
We entered the sequence into a secured copy of Reed’s archive index.
It did not unlock the file.
It highlighted a hidden directory.
Inside was a single audio recording.
Marcus Reed’s voice filled the room.
“If you are hearing this, they have probably used Claire’s identity.”
He sounded exhausted.
“They will make the evidence look complete.”
“Do not trust complete evidence.”
“Look for the eleven-second gap.”
The recording ended.
“What eleven-second gap?” Elena asked.
I thought of logs.
Videos.
Transfers.
Every planted record.
We searched the garage footage.
There was no obvious eleven-second gap.
We searched the bank video.
The synthetic call lasted six minutes.
Then Daniel contacted us.
He had found an anomaly in the Archway authorization.
At 2:13 a.m., my certificate approved Patriot Meridian.
The system log appeared continuous.
But the internal clock and network clock differed by eleven seconds.
Someone had inserted an event into the record after it was created.
The hidden event showed a second certificate authorizing the action before mine.
“Whose certificate?” I asked.
Daniel sent the identity.
The certificate belonged to Colonel Thomas Garrison.
For the first time, we had direct evidence connecting him to the fraudulent approval.
Then Daniel’s voice changed.
“Claire, you need to see the second identity.”
“What second identity?”
“The inserted event required two-person authorization.”
“Who was the other signer?”
A profile appeared on the screen.
The photograph showed a woman in a Northstar executive badge.
She had access to our highest security tier.
She had approved the transfer beside Garrison.
The name beneath the image was mine.
May you like
But the biometric signature belonged to someone else.
My attorney, Elena Brooks.
