Chapter 4 - The employee who knew my investigation existed

The leak inside Northstar narrowed faster than I expected.
That was not reassuring.
Compliance notices of that type went to five people:
Karen.
Northstar’s regional legal counsel.
Chief compliance officer.
The internal audit director.
And a security administrator who managed case access.
Karen volunteered her devices immediately.
So did Legal.
The first suspicious access came from the security administrator’s account.
His name was Owen Marsh.
Forty-one.
Ten years with Northstar.
Quiet.
Dependable.
Not someone I knew beyond elevator conversations.
At first, everyone assumed account compromise.
Then investigators found he had opened my compliance file fourteen times without operational need.
That changed the question.
Owen was suspended pending review.
His attorney later contacted Northstar and said he wanted to cooperate.
Not because he suddenly found morality.
Because access logs are brutally indifferent to loyalty.
He admitted sharing information.
“With Derek?” I asked.
Karen shook her head.
“Not directly.”
“Then who?”
Owen knew Felicia.
Not casually.
They had dated in college.
Briefly.
Years before I met Derek.
They reconnected through social media eighteen months earlier when Felicia asked whether Northstar was expanding vendor capacity in Texas.
Owen told himself he was providing harmless market intelligence.
Carrier demand.
Busy lanes.
Contract cycles.
Then she began asking about specific reviews.
He refused at first.
Then Felicia threatened to expose messages showing he had previously given proprietary information to another vendor.
One compromise became leverage for another.
Familiar pattern.
“How much did she pay him?” I asked.
“Nothing proven.”
That surprised me.
Not every corrupt relationship begins with money.
Sometimes embarrassment is sufficient.
Owen admitted leaking the existence of the audit and forwarding an internal summary to Felicia.
She apparently gave it to Derek.
But Owen denied stealing my credentials or approving payments.
Logs supported that distinction.
His misconduct was serious.
Different from whoever impersonated me.
Then Northstar identified another weakness.
The security system had a legacy “trusted device” feature for certain managers.
My old laptop remained authorized for fourteen months after I replaced it.
I had given that old machine to Derek because he complained his personal computer was slow.
My stomach turned.
“Could he still log in?”
“If your password was saved locally and the token had been cached during certain older sessions, potentially yes for limited workflows.”
“How did nobody notice?”
“Because the system should have deauthorized the laptop during replacement.”
Compliance failure.
Northstar’s.
Not mine.
Not Derek’s alone.
A weak system made abuse easier.
The company disclosed that fact rather than pretending its controls were perfect.
I respected that.
Then forensic imaging of Derek’s devices became possible through the civil discovery process and, later, separate warrants tied to unauthorized system access.
No instant magical access.
Procedure took weeks.
In the meantime, Blue Ridge records showed Derek received consulting commissions.
$84,000 over two years.
Not paid by Gloria directly.
Paid by a small insurance-services LLC owned by Leonard, Derek’s father.
“What services?” Mason asked.
I almost laughed.
“Risk consulting.”
Of course.
Derek sold insurance.
The arrangement could have been legitimate.
Then we found commission calculations tied to Blue Ridge’s Northstar revenue.
The more money Blue Ridge collected from my employer, the more Derek earned.
There was motive.
Financial.
Direct.
But I still did not understand why his mother behaved as though my promotion threatened family order itself.
Then Leonard called me.
Not Derek.
Not Gloria.
Me.
I almost declined.
Laura advised I let him speak while she listened.
Leonard’s voice sounded old.
More tired than I remembered.
“I need to tell you something before Gloria decides I’m dead to her.”
“What?”
“Blue Ridge wasn’t supposed to become this.”
“That’s vague.”
“I know.”
He had started the company twelve years earlier with Gloria as a small family brokerage.
Legitimate.
A handful of trucks.
Owner-operators.
Overflow freight.
Felicia later expanded it aggressively.
Derek arranged insurance.
Gloria handled accounts.
Then a recession hurt them.
They began padding charges.
At first, small.
Then more.
Leonard claimed he objected.
“Did you stop it?”
“No.”
“Then you participated.”
Silence.
“Yes.”
I was beginning to appreciate that word.
Then he said:
“Your promotion scared them.”
“Why?”
“Because the senior operations manager signs off on annual carrier integrity reviews.”
I knew that.
“What would I have found?”
Leonard inhaled.
“Blue Ridge doesn’t own half the trucks it claims.”
Ghost capacity.
A brokerage represented leased vehicles and subcontractors as dedicated fleet assets to qualify for higher-rate contracts.
Potential contractual fraud.
Then he added:
“And some of the safety certifications were altered.”
My stomach dropped.
“How altered?”
“Expiration dates. Driver records. Inspection records.”
My mind shifted automatically into operations mode.
False safety documentation was not merely financial theft.
People could get hurt.
“Did Derek know?”
Leonard’s silence answered.
Then:
“He insured the fleet.”
Of course he knew.
Maybe not every document.
Enough to matter.
“Why are you telling me?”
“Because after last night, I realized Gloria will let Derek destroy you before she lets Blue Ridge be audited.”
I closed my eyes.
“You realized that after he punched me?”
“I should have realized it years ago.”
“Yes.”
Then Leonard whispered:
“There’s something else. The company has a second set of books.”
I went still.
“Where?”
“Gloria keeps them.”
“Why?”
“Because Northstar isn’t the only customer.”
“Who else?”
His voice dropped.
May you like
“Federal emergency contracts.”
Cliffhanger: Blue Ridge had not only been overbilling my employer—it had used questionable safety records on freight connected to federal emergency-response contracts, turning my promotion into a threat far larger than Derek’s wounded pride.
Related Stories