Chapter 8: The Credential That Lied
Ruth’s phone lay faceup between the legal pad and the unplayed audio file. Northstar’s notice remained on the screen, its expiration time unambiguous.
No one had moved to end the meeting. No one had agreed to approve the offer.
Daniel looked around the table. A few minutes ago, they had been weighing numbers. Now each director seemed to be weighing the possibility that someone had used the company’s systems to turn a private meeting into a weapon.
“We have fifteen minutes,” Grant said. “If we let the authorization expire, Northstar may walk.”
Ruth kept her eyes on the notice.
“That is still a deadline, not a recommendation.”
“I’m not recommending anything,” Grant replied. “I’m pointing out the cost.”
Daniel felt the old instinct rise: make the decision, close the uncertainty, get everyone moving. He’d built a company by trusting that instinct. He also knew how quickly certainty could become an excuse.
The door opened. The independent examiner stepped inside, carrying a tablet and a slim folder. Behind him, the security lead followed, holding a separate envelope.
“I have a preliminary update,” the examiner said. “It’s limited.”
“Then tell us exactly what it establishes,” Ruth said, “and what it doesn’t.”
The examiner set the folder down but did not open it.
“The network trace shows the attempted transfer passed through a vendor account associated with the conference-room support system. That gives us a route to investigate. It does not identify the person who controlled the account.”
“Does it tell us where the file went?” one director asked.
“Not reliably yet. The trace is incomplete, and we’re still validating its timestamps. I can’t say whether a recording was transmitted, who received anything, or who initiated the connection.”
Grant leaned forward.
“So the device may not have sent a recording at all.”
“That is possible,” the examiner said. “So is the opposite. We don’t have enough verified information to conclude either way.”
Daniel watched Grant take in the answer. The CFO’s expression stayed composed, but his fingers tapped once against the table.
The examiner turned to Daniel.
“The vendor route is a useful lead. It is not attribution.”
“Understood,” Daniel said. “Please preserve the trace as collected. No one logs into that account or tries to reset its credentials without documenting the step and getting your approval.”
The examiner nodded.
Ruth looked toward the security lead.
“What have you found?”
“We compared the maintenance system’s available audit data against the access and work records we were able to preserve,” he said. “There’s a timing discrepancy.”
He opened the envelope and removed a printed page. Before handing it to Ruth, he explained that the original logs remained untouched and that the printout was a working copy.
“The ticket carrying Eli Carter’s credentials was created after his shift ended,” he said. “The maintenance system shows the entry at 10:18 p.m.”
Grant’s tapping stopped.
“His credentials were used at that time?” Ruth asked.
“The ticket was associated with them. That doesn’t tell us who was at the keyboard. We’re still trying to establish how the account was accessed.”
“Did Eli have a reason to be here?” asked a director.
“His records say he didn’t.”
The conference-room door opened again. Eli stood just outside with Annie beside him. Her yellow sweater looked brighter than the gray corridor behind her. She held the straps of her purple backpack, her untied left sneaker still loose at the ankle.
Daniel had asked security to bring Eli in only if he was comfortable answering a few questions. He stood when he saw them.
“Eli,” Daniel said. “You can leave whenever you want. We’re checking the ticket and the records around it. You’re not being accused.”
Eli glanced at the directors, then at the paper in the security lead’s hand.
“I brought the notes I mentioned.”
He placed a small, creased notebook on the table. His handwriting filled the page in neat, compact lines. Beside the entry for the boardroom inspection, he’d written the date, the time he found the unregistered device, and the time he submitted his report.
A second page showed the end of his shift. Eli had written that he left the executive floor before nine. Beneath it, he’d recorded a reminder to pick Annie up from the place she’d been waiting downstairs.
The notes didn’t prove who used his credentials later. But they gave a plain account of where he had been—and when.
“I write things down because I’ve had tickets change after I submitted them,” Eli said. “I thought if it happened again, I should have a copy.”
The room went quiet.
Daniel felt heat rise behind his collar. Eli had been left to make his own paper trail because the company’s systems had failed to protect the one he’d entered.
“Thank you for keeping it,” Daniel said.
Eli’s gaze dropped to the open notebook.
“I didn’t want anyone saying I’d installed that thing.”
“No one should have said that without evidence,” Daniel replied. “And I’m sorry you had reason to worry.”
Annie looked from her father to Daniel.
“Are they going to take his job?”
“No,” Daniel said. “He’s here to help us understand what happened. That’s all.”
He knew a promise could not replace a proper safeguard. Still, Annie’s shoulders eased a fraction, and Eli placed one hand gently on her backpack strap.
Ruth asked the security lead to record the notebook’s receipt, make a copy with Eli’s consent, and return the original. No one would add it to the case as proof of who made the ticket. It established what Eli had written down, nothing more.
Then Daniel turned to the security lead.
“I want the badge activity compared with the maintenance timestamps. Who controls that review?”
“Security normally reports through the operations chain.”
“Then not this review,” Daniel said. “Send the preserved copies directly to Ruth, counsel, and the examiner. No one in Grant’s chain of command gets to select, filter, or revise the records before they do.”
Grant’s expression tightened.
“I oversee finance, not security.”
“I didn’t say you did.”
Daniel met his eyes. His own voice sounded calm, but he felt the weight of every person around the table listening for more than the words. He wouldn’t turn suspicion into an accusation. Not now.
Ruth gave the security lead a slight nod.
“Proceed as Daniel requested. Record who receives every copy.”
The lead returned to his tablet. The examiner stood beside him, following the timestamp comparison. The directors waited. Somewhere beyond the room, the company kept working: engineers monitoring infrastructure, support staff answering calls, technicians replacing equipment. Thousands of people had no idea that a handful of minutes and a few questionable records might decide who controlled their company’s future.
A message appeared on the security lead’s screen.
He read it, then looked up.
“The badge records give us a location,” he said.
“Whose badge?” Ruth asked.
“Not an individual yet. The entry is logged to a restricted executive-office area. The maintenance ticket was created two minutes later from a terminal associated with that area.”
A director leaned toward the printout.
“Can you identify who entered?”
“Not from this record alone. The badge identifies the access credential, not necessarily the person carrying it. We’re checking the assignment history and whether anyone else could have used it.”
Grant’s face had gone still.
Daniel looked again at Eli’s notebook. The handwritten times were modest, ordinary details: the device inspection, the report, the end of a shift. They couldn’t say who had used the false credential. They could say Eli had left before the ticket was created.
The examiner tapped the tablet.
“The vendor account and the office-terminal timestamp may be related,” he said. “But we don’t yet have a verified link between them.”
“Then we don’t call them connected,” Ruth said. “We preserve both leads and find out.”
The security lead printed the access summary and passed it to Ruth. She read it once, then placed it faceup beside Northstar’s deadline notice.
May you like
The false ticket hadn’t come from Eli’s workstation.
It had been created from inside an executive office.
