Another came from a completely unrelated vendor.
The fourth had never left a government-controlled facility.
That complicated the picture.
“Could be designed to point us toward a contractor,” Rebecca said.
“Or away from one.”
“Exactly.”
General Cross joined us. “National leadership wants an initial assessment within the hour.”
“They can have facts within the hour,” I said. “Assessment comes when we have one.”
Cross gave a slight nod.
One reason we worked well together was that he did not confuse urgency with pretending certainty.
For the next six hours, I barely moved from the command floor. We mapped timing patterns, maintenance records, personnel access logs, hardware changes, software revisions, and authentication anomalies. Every time a theory began to look convincing, another piece of evidence weakened it.
Northstar appeared suspicious, then clean.
An overseas partner appeared clean, then suspicious.
A government update package contained a timing irregularity that made half the room lean forward, only for an analyst to prove it had existed for nine months.
At 11:40 p.m., Rebecca set a paper cup beside me.
“Coffee.”
“I didn’t ask.”
“You stopped blinking.”
I drank it anyway.
My personal phone sat inside a secure locker outside the compartment.
I had not checked it for hours.
That helped.
At 1:15 a.m., we finally found something real.
Not an attacker.
A pattern.
“Director,” one of our analysts called.
I crossed the floor.
He displayed a sequence of maintenance windows from six separate organizations.
The suspicious events always occurred shortly after routine diagnostic synchronization.
“Which system initiates those?”
He highlighted the answer.
A shared verification service.
Government-owned.
Contractor-maintained.
Used across multiple environments.
“Who maintains it?”
He hesitated.
“Northstar is one of the vendors.”
Of course they were.
“Primary?”
“No. Secondary.”
“Who has modification access?”
“Limited personnel across three organizations.”
“Names.”
He produced the list.
I scanned it.
Thirty-seven people.
Brent was not among them.
Relief came and irritated me at the same time. I did not want my cousin involved, regardless of how much I disliked his behavior.
Then Rebecca touched my arm.
“Elena.”
She pointed at another field.
One of the access-management teams reported through the division Brent directed.
Not to him personally, but near enough that any formal investigation would eventually cross his desk.
“Freeze external notification,” I said.
General Cross frowned. “We need contractor cooperation.”
“We need controlled contractor cooperation. If this is malicious, someone may be waiting to see what we know.”
Rebecca understood immediately.
“Compartmented review?”
“Yes.”
Cross considered it.
“Approved.”
At 3:00 a.m., I finally stepped into the small secure office attached to the command floor and closed the door.
For the first time since leaving the barbecue, silence surrounded me.
I rubbed both hands over my face.
On the desk sat a family photograph my grandmother had mailed me three years earlier.
She stood in the middle.
I was on one side.
Brent was on the other.
We had both been smiling.
I wondered when our relationship had become something that only worked when he believed I was beneath him.
A secure internal message appeared on my terminal.
Legal review.
One sentence.
Potential conflict-of-interest disclosure required: family relationship to contractor management employee.
I stared at it.
There it was.
Professional reality did not care that Brent and I were cousins who barely spoke outside holidays. The moment his division entered the investigative perimeter, I had to disclose the relationship formally.
I completed the document.
Then I requested independent oversight of any action involving his department.
It was the correct decision.
It was also the decision that would prevent anyone later from claiming I had protected him—or targeted him.
At 6:30 a.m., I retrieved my personal phone.
Eighty-one messages.
I ignored most of them.
One was from my grandmother.
Call me when you can. I love you. Eat something.
I smiled.
One was from Brent.
Please answer. I need to know if my job is in danger.
Not are you safe.
Not are you okay.
Not I’m sorry for treating you like garbage for years.
My job.
I locked the screen.
Three days passed before I slept more than two hours at a time.
The suspicious activity stopped completely.
That frightened me more than if it had continued.
An attacker who failed repeatedly usually became noisy.
An attacker who stopped after learning enough had probably moved on to the next phase.
On the fourth morning, Rebecca entered my office holding a thin folder.
“We have a problem.”
“Only one?”
“This one has a name.”
She placed the folder in front of me.
Inside was a contractor compliance report.
Northstar had discovered a configuration irregularity almost six weeks earlier.
The issue had been categorized as low-risk.
No emergency notification had been made.
“Who approved the classification?”
Rebecca pointed.
The name was not Brent’s.
Popular Posts
→- 1
- 2
- 3
- 4
Recently Viewed
Stories you read recently will appear here.
