Chapter 2
The sheriff arrived at 6:47 p.m.
Two deputies.
One state investigator delayed by snow.
No sirens.
No dramatic convoy.
The road was barely passable.
The detained intruder gave his name:
Evan Pike.
Thirty-six.
Private security contractor.
Former corrections officer.
No current employment with Santoro companies.
He had a licensed firearm.
Investigators separated the first shot from the rest of the entry sequence.
He denied firing.
Ballistics would decide later.
The second man who escaped:
unknown at first.
Carlo Vieri was not among them.
That mattered.
Then Carlo’s location.
His attorney answered immediately.
“He is at the Pine Creek Inn.”
Twenty miles away.
That could be confirmed.
Yes.
Hotel camera.
Credit-card charge.
front desk.
He had not physically entered Black Pine Lodge.
The next question was what Carlo had actually done.
The investigator asked Adriana.
She sat in the library.
No Rocco.
No family counsel for her.
Her own lawyer joined by video because roads were closed.
Adriana admitted:
she had texted Carlo the service-door code at 4:12.
Investigators then established how she got it.
That was the first major question.
She said:
“From Emily’s phone.”
I stared when they told me later.
The answer was my phone.
I checked.
Still in my coat pocket.
At 3:32 that afternoon, I had been helping set dinner tables.
Adriana asked to borrow my phone because hers was charging.
She said:
“Need the lodge Wi-Fi password.”
I handed it over unlocked.
It had felt ordinary at the time.
No.
Normal.
She had opened the staff messaging app.
The morning security message contained:
SERVICE DOOR CODE UPDATED:
642771
TEMPORARY UNTIL KEYPAD SERVICE.
She copied it onto the card.
Then texted Carlo from her own phone.
So:
no hacking.
No corrupt lodge manager.
Just access.
Then my badge.
Investigators then examined whether Adriana had taken it.
She denied.
Camera at 3:49 showed her standing beside me near the dining room.
At 3:51, I moved toward kitchen.
At 3:52, Adriana bent near the floor.
At 3:53, she walked toward the service hall.
Could have been:
picking something up.
Then a corridor camera showed her entering guest wing, not archive.
At 4:03, another person appeared in the rear service hall.
Face obscured by winter hood.
They had entered using the code.
At 4:07, my badge opened the archive corridor.
At 4:19, the archive room itself opened.
Different readers.
The first required:
general staff badge.
The second:
archive-authorized badge.
Mine should not open archive room.
That was the problem.
I was household staff.
No archive access.
Maren checked the logs.
My badge number had been temporarily elevated at 3:58.
The system log showed who had done it.
System administrator account:
M.RUIZ.
Mateo Ruiz.
The security chief.
The entire room changed when that appeared.
Mateo stared.
“I did not do that.”
Investigators considered whether Mateo’s account had been compromised.
That remained possible.
Investigator:
“Who knows your password?”
“No one.”
Then he stopped.
Wrong answer.
He corrected.
“My deputy, Sean Kerr, has emergency recovery credentials.”
Sean.
Sean Kerr was the onsite security deputy.
The immediate problem was that Sean was missing.
Missing.
Maren counted security staff again.
Sean had been assigned to:
generator outbuilding
from 3:30 until storm stabilized.
He did not answer radio.
Search team found the outbuilding empty.
Snow tracks:
one vehicle had left service lot around 4:10.
But road camera failed in storm.
Sean Kerr had disappeared.
Now:
inside problem.
Then the maintenance PIN used to bypass the service-door alarm.
Mateo’s admin account could access it.
So could Sean’s recovery credentials.
The pieces aligned.
Not enough for conclusion.
Then Adriana’s role.
She gave code to Carlo.
Carlo said he shared it with one person:
a contract investigator named Blake Mercer.
The reason mattered.
He wanted Blake to enter, retrieve or photograph the disputed easement file, and leave.
It was unauthorized entry and potential theft.
Unauthorized entry.
Possible theft.
Yes.
Carlo said Adriana had agreed.
She said:
“Only to talk.”
Texts settled part.
Adriana at 4:12:
Side service code 642771. Come through quietly. I’ll get Rocco alone after dinner. No scene.
Carlo:
I am not coming. Blake will bring the file question to me.
Adriana:
He is not taking anything.
Carlo:
He only needs to see original.
Adriana:
Five minutes.
There.
She knew Blake was coming in.
Not armed attack.
But unauthorized.
Then Carlo at 4:14 to Blake:
Use side door. Photograph 1998 easement addendum only. Do not engage staff. If access blocked, leave.
Strong.
Blake’s phone had not yet been recovered.
Not yet recovered.
Investigators considered Blake the likely second intruder, though they had not confirmed it yet.
Description:
tall.
dark parka.
But detained Evan Pike was not Blake.
The next question was who had hired Evan.
His phone showed messages from:
S.K.
Sean Kerr.
Security deputy.
There.
Sean to Evan:
Need backup extraction in storm.
Client records dispute.
No violence.
Meet lower service road 4:00.
Then at 4:31:
Door open.
Move now.
Then:
gunfire.
Investigators then focused on who had fired first.
Exterior camera captured muzzle flash from tree line.
Not Evan inside.
Someone outside.
Potential third man.
Sean became the obvious person to examine next, but investigators had not yet established that he fired the shot.
Then the stolen records:
winter-security contract.
2006 lodge ownership schedule.
The records made investigators ask why Sean would want those documents.
Maren knew.
The 2006 ownership schedule documented:
when Santoro family purchased controlling interest in Black Pine Lodge.
The winter-security contract documented:
private patrol obligations,
insurance,
emergency access,
vendor responsibilities.
Combined:
ownership + security.
Could support a claim about who controlled premises during a past incident.
Maren finally named the past incident.
Maren hesitated.
Then said:
“The avalanche.”
Rocco looked up.
Everyone in the area knew about the 2007 Black Pine avalanche.
Three skiers injured.
One guide killed.
The lodge had been partially closed that week.
Official history:
natural slide after extreme snowfall.
county inquiry found no criminal wrongdoing.
The ownership schedule mattered because liability depended on who controlled the property at the time.
Because liability depended on:
who controlled upper service trail,
who authorized snowcat access,
who received avalanche warnings.
Rocco had been twenty-four then.
His father, Antonio Santoro, had just taken control of the lodge.
Carlo Vieri worked as operations coordinator.
Sean Kerr had been there too.
He had been nineteen then, working as a seasonal lift operator.
That connection gave his interest in the old records a new context.
Then Maren said:
“There was a civil settlement.”
The settlement had included confidential terms, with some material public and some sealed.
Old.
Some public.
Some sealed.
Family paid.
Insurer paid.
Guide’s family settled.
No admission.
Then investigator asked:
“Was Sean involved?”
Maren said:
“He was one of the workers who reported wind loading before the slide.”
There.
Sean had history.
Investigators considered whether Sean was trying to prove that old reports had been ignored.
That could explain his interest in the records.
It could not explain or justify bringing armed men into the plan.
Then Rocco asked:
“Did my father know?”
Maren answered:
“I don’t know.”
No mythology.
Then the missing easement file.
The missing easement file had not been stolen.
Recovered local camera storage showed why.
At 4:19, a hooded man entered.
He used my badge, elevated.
He opened the cabinet.
He photographed one folder.
Then removed:
winter-security contract.
2006 ownership schedule.
He never touched the 1998 easement folder.
So Blake’s instructions and actual behavior diverged.
Carlo identified the hooded man as Blake.
Carlo identified him from build:
“Yes.”
That raised a different question about why Blake had taken files beyond Carlo’s instruction.
Investigators then examined whether Sean had changed Blake’s instructions after Carlo’s message.
Phone records answered that question.
Then Blake was found at 9:20 p.m.
Not at lodge.
His SUV slid into ditch five miles away.
He was injured but alive.
No gunshot.
Deputies detained him after medical evaluation.
Inside vehicle:
my badge.
the two missing records.
a digital camera.
no firearm.
Blake said:
“Sean told me the easement addendum was filed behind the 2006 ownership schedule.”
He entered.
Found folders.
Took both because Sean said originals needed to compare.
Blake said Sean had instructed him to take the originals rather than only photograph them.
“Sean told me paper texture and signatures mattered.”
Carlo denied authorizing removal.
“No.”
Adriana denied authorizing removal too.
“No.”
Then:
Blake described Evan Pike as Sean’s additional security contact.
“Sean’s guy.”
“I didn’t know him.”
Blake said Sean had described Evan as backup for the extraction.
“I thought security cover.”
Then:
Investigators asked Blake whether he heard the gunfire.
“Yes.”
“I left.”
Blake’s conduct serious.
But not shooter.
Then ballistics.
The shot through window:
rifle round fired from approximately eighty yards.
Not from either man inside.
Snow search found:
one spent casing near a tree line.
Footprints led toward service lot.
Then disappeared where vehicle had been parked.
The tracks were consistent with Sean Kerr’s movements and vehicle timeline, but investigators did not treat that inference as proof by itself.
Then Adriana.
Her lawyer advised no more statements.
Rocco did not confront.
He sat with me in kitchen at midnight.
My hands still shook.
He asked:
“Did she tell you why she wanted Carlo inside?”
“No.”
Then:
“Did she seem afraid?”
I thought.
“No.”
“Excited.”
That surprised him.
“She thought she was fixing something.”
That possibility remained uncertain.
Then I remembered one thing.
At 3:20, before she borrowed my phone, Adriana had asked:
“Does the archive still keep old ownership schedules downstairs?”
I had said:
“I don’t know.”
She smiled.
“Of course you don’t.”
At the time:
rude.
Now:
relevant.
I told Rocco.
He stared at the table.
Then:
“She knew there were two stories in that archive.”
“What two?”
“The easement.”
“And the avalanche.”
Then his phone buzzed.
Miriam Stone, outside counsel.
She had reviewed the first page of the recovered 2006 ownership schedule.
One handwritten note appeared in margin.
Initials:
A.S.
Antonio Santoro.
Rocco’s father.
Next to the effective ownership date:
Control accepted subject to unresolved avalanche-safety obligations from prior operator.
The avalanche happened six weeks after acquisition.
If those obligations were unresolved, then the old family story—that Santoro merely inherited the mountain’s problems after closing—was wrong.
Rocco read the note twice.
Then looked at me.
“The attack may be new.”
May you like
He touched the old paper.
“But whatever they came to hide is nineteen years old.”
