Chapter 5
Paolo Santini tried to make the case about Dante.
That was his best defense.
If Romano Distribution had been manipulating acquisition terms, pressuring vendors, or secretly targeting Santini’s companies, then the attempted theft could be reframed as business espionage inside an already dirty rivalry.
His lawyers requested years of procurement records.
Dante’s counsel objected to the breadth.
The court narrowed.
Then the records came anyway.
That made Dante nervous for reasons unrelated to the shooting.
Large companies are rarely clean in the sense people imagine.
They contain:
bad emails.
sloppy approvals.
late invoices.
conflicts someone forgot to disclose.
managers who say stupid things.
The review found no scheme against Santini.
It did find a warehouse contract awarded to a Romano family friend without full competitive bid six years earlier.
Not illegal.
Bad governance.
Dante disclosed it to the board.
The board revised procurement thresholds.
No one tried to bury a smaller embarrassment because a bigger criminal case was underway.
That was the exact habit this story kept punishing.
Then Santini’s role became clearer.
His company, Santini Freight, had lost two major contracts to Romano Distribution in eighteen months.
He was angry.
But competition alone did not explain why he bought into Crestline years earlier.
Mesa Staffing Partners was originally a real investment.
Crestline was profitable.
Santini expected dividends.
Then margins on Romano accounts rose.
He asked questions.
Gabe Neri gave vague answers.
Santini did not investigate because the money looked good.
That was the first failure.
Later, when Bianca began reconciling invoices, Santini learned the margins might be exposed.
He ordered Varga to retrieve the audit.
That was the criminal turn.
He did not invent the ghost-payroll system.
He chose to protect it once he understood enough.
Again:
different responsibility.
Then Alice Doran.
Crestline’s former CEO.
She had approved placeholder IDs years earlier as an operational shortcut.
Did she know they became overbilling?
Emails showed she knew some invoices included “coverage reserve.”
She believed reserves offset last-minute staffing risk.
Did contract allow?
No.
Her lawyer called it mistaken interpretation.
Auditors called it systematic overbilling.
She faced civil claims and regulatory inquiry.
No evidence she knew about armed attack.
Then Gabe.
He had cloned M-01 personally.
Why not use a copied temporary badge?
Master card simplified.
He admitted he enjoyed proving he could beat the house system.
That ego mattered.
He could have passed Varga the kitchen door code only.
Instead, he created a broad clone.
The clone opened:
kitchen.
service corridor.
storage.
maintenance room.
That gave crew options.
Then the black credential emulator.
Forensics showed three profiles loaded:
M-01.
a Crestline vendor badge.
a Romano warehouse supervisor badge.
The supervisor badge had been cloned months earlier.
Where was it used?
Two warehouse entries after hours.
Security footage showed Gabe.
He had accessed payroll terminals to correct ghost profiles when audits were scheduled.
That upgraded fraud from passive billing to active concealment.
Then Bianca’s audit proved useful to prosecutors.
But investigators did not let her become hero.
Mara asked:
“Did you copy employee payroll data to your private drive?”
“Yes.”
“Authorized?”
“No.”
“Did you store names and wage details?”
“Yes.”
“Encrypted?”
“Yes.”
“Still unauthorized.”
“Yes.”
The data was transferred to counsel.
Her private copies deleted under supervision.
Employees notified.
That was humiliating.
Necessary.
Then Bianca’s employer reviewed her conduct.
She worked for an investment office, not Romano.
The firm concluded:
she had not misused employer systems.
but she had violated professional ethics by conducting an unauthorized personal investigation involving third-party employee data.
They suspended her for three months.
Required ethics review.
She considered resigning.
Her supervisor said:
“Don’t confuse consequence with exile.”
She stayed.
That line helped.
Then Dante and Bianca did not see each other for six months.
No dramatic hatred.
No secret meetings.
The wedding was formally canceled.
Deposits handled.
Some vendors refunded.
some did not.
The dress remained at a boutique.
Bianca eventually sold it through consignment.
No ritual burning.
Then Sofia’s recovery.
She hated crowded bars.
Not restaurants.
Bars.
Because glass.
At work, she moved cocktail service farther from the kitchen doorway.
For practical flow, she told herself.
Maybe.
No one challenged.
Then one evening a guest dropped a bottle.
It shattered.
Sofia froze.
Then looked down.
No gunshot.
Just wine.
She called for cleanup.
Her hands shook.
She kept working.
No applause.
Then Luis Ortega, security chief, apologized to her.
“For what?”
“I should have treated the missing master card as an incident immediately.”
Sofia looked.
“That’s not why Varga grabbed me.”
“No.”
“Then fix your part.”
He nodded.
Exactly.
Then security logs showed something else.
The missing-card report had been entered as:
inventory discrepancy.
Not:
credential compromise.
Why?
Because Luis did not want to trigger full lockdown until he knew it was actually lost.
Reasonable in a small sense.
Dangerous in consequence.
New policy:
missing high-privilege credential deactivates immediately.
investigate after.
A replacement can be issued if found harmless.
Security should fail closed when consequence high.
Then Dante asked:
“Would that have stopped attack?”
Priya answered:
“Maybe not. Clone could have been captured before deactivation.”
“But?”
“It would have invalidated M-01 before 8:19.”
There.
If card had been deactivated yesterday morning, clone would fail.
One procedural choice might have stopped entry.
That hurt Luis.
Dante did not fire him for one mistake.
Independent review found broader performance strong.
He received formal corrective action.
Stayed.
Then Varga’s crew.
The second gunman, Cole Mercer, pleaded guilty.
He told prosecutors Varga expected the kitchen door to open silently.
When alarm chirped, Varga said:
“Keep moving.”
The first bottle shattered because Mercer fired toward a security guard.
Not because Dante started.
Ballistics confirmed.
Then Varga grabbing Sofia.
He admitted he believed she had safe code.
If she refused?
“Move her.”
How?
He would not answer.
Zip ties were found in his pocket.
Sofia read that in filing.
She stopped halfway through.
Did not need more.
Then victim compensation from criminal restitution.
Sofia submitted:
medical expenses.
lost work.
damaged personal items? Minimal.
counseling costs.
No claim for symbolic millions.
Court determined.
Then Dante’s private anger at Santini.
He imagined confronting him.
Frequently.
He did not.
When Santini appeared at a preliminary hearing, they looked at each other across hallway.
Santini said:
“You think you’re cleaner than me?”
Dante’s lawyer moved between.
Dante answered:
“No.”
Then:
“I think you paid men to enter my house.”
Specific.
Santini laughed without humor.
“That’s all?”
“That’s enough.”
He walked away.
The case did not need a morality contest.
The civil discovery also uncovered one more uncomfortable Romano habit.
For years, family residences had paid some temporary-event invoices through corporate accounts and later reclassified the expenses internally.
Usually legitimate:
client dinner.
board reception.
charity event.
Sometimes sloppy:
birthday dinner coded as business hospitality.
wedding tasting temporarily paid by company before reimbursement.
No ghost workers.
But bad boundaries.
Santini’s lawyers tried to use that sloppiness to blur the staffing fraud.
Dante refused.
The accounting team reviewed.
personal expenses reimbursed where needed.
policies tightened.
He told the board:
“We don’t defend a real billing problem by pretending our unrelated mess doesn’t exist.”
That made counsel nervous.
It also made the investigation cleaner.
Then Sofia asked whether household staff would be dragged into depositions over event coding.
Counsel narrowed records to people with actual knowledge.
Good.
A dishwasher should not become litigation furniture because an executive used the wrong expense code.
Then one of the guests injured during the attack asked to see security footage before settling.
There was no complete footage.
The cloned-card entry existed.
kitchen camera clips existed.
dining-room camera did not cover private dinner by design.
The guest said:
“Maybe you should record everything.”
Sofia disagreed.
People eating in a private home should not be under permanent surveillance because violence happened once.
They added exterior and service-route coverage.
Kept private dining areas camera-light.
Security and privacy remained a tradeoff.
Then Bianca’s employer asked her to present an internal lesson after suspension.
She refused at first.
“I’m not going to stand there as cautionary entertainment.”
Her supervisor said:
“Then don’t.”
Instead she wrote a two-page procedure memo:
How to handle suspected fraud involving people close to decision-makers.
It said:
define mandate.
separate conflicts.
use independent counsel.
preserve source data without broad copying.
avoid operational access unrelated to investigation.
tell affected decision-maker enough to protect safety without handing them control of evidence.
No confession.
No biography.
Useful.
The firm adopted it.
Bianca later said that hurt more than punishment.
A mistake becoming procedure means the organization expects someone else to face the same temptation someday.
That made the lesson real.
Then one final civil issue surfaced.
A temporary worker whose identity had been duplicated on invoices worried employers would think he had worked overlapping shifts fraudulently.
Crestline issued a correction letter.
Romano confirmed the duplicate came from vendor billing, not the worker.
No lawsuit.
May you like
Just a record fixed before it followed the wrong person into another job.
That small correction mattered because fraud systems often leave ordinary people carrying explanations long after executives move on.
