Chapter 3 - The complaint they filed before I knew I was in danger

Northstar placed me on paid administrative leave.
I hated it.
Karen hated telling me.
But I understood.
My promotion did not give me immunity from investigation simply because I had been assaulted.
If someone used my credentials to benefit a company owned by my in-laws, Northstar had to determine whether I participated.
So did I.
My employment attorney, Laura Chen, joined the meeting by video.
“Do not frame leave as punishment,” she told me afterward. “Their compliance duty exists independently of Derek.”
“I know.”
“You sound offended.”
“I am.”
“You can be offended and still understand.”
I liked her immediately.
Northstar’s preliminary review showed fourteen suspicious transactions over seventeen months.
Not millions disappearing overnight.
Smaller.
Cleaner.
Fuel adjustments.
Emergency-load premiums.
Documentation waivers.
Duplicate detention charges.
Individually boring.
Together, approximately $418,000 in extra payments to Blue Ridge.
My credentials appeared on six exception approvals.
Two other managers appeared on the rest.
Were their credentials compromised too?
Compliance did not know.
Then Mason asked me something I had not considered.
“Who had access to your laptop at home?”
“Derek.”
“Password?”
“He knew my old one.”
“Current?”
I hesitated.
“No.”
“Phone?”
“He knew the passcode until January.”
“Security token?”
My stomach tightened.
Northstar used an authentication app on my phone.
Derek frequently borrowed the device when his battery died.
Not recently.
But enough.
“Could he approve something without you knowing?”
“If he had my phone and laptop at the same time.”
“Did he?”
Probably.
A hundred ordinary evenings came back differently.
Me showering.
Cooking.
Sleeping.
Derek sitting at the kitchen island with both laptops open because he was “checking fantasy football.”
There is nothing dramatic about realizing a marriage gave someone logistical access to betray you.
It is mostly humiliating.
That afternoon, I obtained a temporary protective order based on the assault and witness statements.
It was narrow.
Derek could not contact or approach me except through counsel for necessary matters.
It did not make him vanish from my life.
We still jointly owned the house.
Had joint financial obligations.
A marriage does not evaporate because one person finally names violence.
Then Gloria violated the spirit of the order without technically contacting me.
She called my mother.
My aunt.
Two coworkers.
And the pastor of a church I had attended exactly three times with Derek’s family.
Her message was consistent:
Vanessa had become intoxicated by career success.
Vanessa humiliated Derek publicly.
Vanessa manipulated coworkers into exaggerating a private marital disagreement.
I did not respond publicly.
Neither did Mason.
But one phone call mattered.
The pastor called me himself.
“I want you to know Gloria contacted me,” Reverend Allen said.
My shoulders tightened.
He continued:
“I told her I will not participate in using religion to justify assault.”
I closed my eyes.
“Thank you.”
“She quoted scripture at me for twenty minutes.”
“That sounds like Gloria.”
“I also told her ‘Only God can save you’ is not pastoral counsel when spoken over an injured woman.”
Something loosened in my chest.
For years, Gloria had used faith as a weapon because she assumed disagreement with her sounded like disagreement with God.
Hearing someone inside her own religious world reject that mattered.
Not legally.
Emotionally.
Then Northstar’s digital team called.
The suspicious approvals from my account had originated from two locations.
Our house.
And Gloria’s house.
I stared at the report.
“My credentials were used at Gloria’s?”
“Yes,” the investigator said. “At least once.”
“Was I there?”
Date: Thanksgiving.
I had been.
So had twenty relatives.
Not enough.
Then another detail.
The browser fingerprint matched a device regularly used for the Blue Ridge vendor portal.
A Windows laptop registered to Garrison Family Ventures.
Felicia’s company.
This was getting worse.
But not simple.
A device at Gloria’s house might be used by anyone.
Then Northstar traced an email tied to one suspicious approval.
It had been sent to a vendor representative named Aaron Pike.
Vanessa approved. Push before Monday review.
Sender:
DHolloway@...
Derek.
My husband had been communicating directly with the vendor.
I read the email twice.
“He doesn’t work for Blue Ridge.”
“No,” Karen said. “At least not officially.”
“What does he do for them?”
“We’re trying to determine that.”
Mason asked:
“What does Derek do for a living?”
“Commercial insurance.”
He sold transportation-risk policies.
Carrier liability.
Cargo coverage.
Fleet programs.
I suddenly understood why he knew so much about my company’s vendors.
Insurance gave him legitimate access to trucking businesses.
Including his mother’s.
Then Laura called with another piece.
Derek had filed for a temporary protective order of his own.
Against me.
He alleged I became physically aggressive after drinking at the party, broke glass intentionally, threatened his family, and used my brother’s military background to intimidate him.
I laughed.
It came out ugly.
“He punched me in front of thirty people.”
“That is supported by witnesses.”
“And video?”
Karen had one.
My coworker Daniel had been filming my toast when Derek entered the frame.
The recording showed him grab me.
Force my head down.
Strike me.
It did not show me attacking him because I didn’t.
Good.
Evidence.
Then Laura’s voice hardened.
“Vanessa, Derek attached something to his petition.”
“What?”
“A letter stating your promotion was under internal ethics review for vendor favoritism.”
I went cold.
“That review only opened after the anonymous complaint.”
“Yes.”
“Who gave him the letter?”
“He submitted a copy of an internal Northstar compliance notice.”
I stood.
“That’s confidential.”
“Yes.”
“Even I don’t have that notice.”
“Exactly.”
May you like
Someone inside Northstar had been feeding Derek information.
Cliffhanger: Derek had access to a confidential Northstar compliance notice I had never received—meaning the scheme around my stolen credentials might include someone inside my own company.
Related Stories