Chapter 8
Five years after the attack, Crestline asked Romano Distribution to remove the final special audit condition from its contract.
The request went to the board.
Not Dante alone.
Crestline had:
new ownership.
new executive team.
four clean independent audits.
worker-facing shift confirmation.
no unresolved ghost profiles.
standard encrypted access credentials.
Priya recommended approval.
One director objected.
“They almost got people killed.”
“No,” Priya said.
“Former executives and outside criminals contributed to an attack.”
The director frowned.
“Same company.”
“Not same people.”
Then:
“If a control has no exit condition, it is punishment.”
The board removed enhanced review.
Crestline became normal vendor.
Still audited like others.
Dante voted after disclosing his history.
The motion passed.
He felt uncomfortable.
That did not make it wrong.
Then Paolo Santini completed part of his sentence and began litigating business restrictions.
News outlets called Dante.
No comment.
The rivalry had ended years earlier.
Santini’s old trucking company had different owners.
Dante refused to keep competing with a man through headlines after the market relationship no longer existed.
Then Varga sent Sofia a letter from prison.
Through victim-notification process.
She declined delivery.
No obligation.
Then Gabe Neri completed restitution schedule.
One payment went to the estate for security damage.
Another to workers affected by fraud.
One to Sofia under criminal restitution.
She received notice.
Deposited.
No emotion.
Money can be accounting without forgiveness.
Then Bianca’s life.
She married Jonah Stein in a small civil ceremony.
No connection to Dante.
No secret invitation.
Sofia saw a photograph because mutual acquaintance shared.
Bianca looked happy.
Sofia felt relieved.
Then guilty for relief.
Then stopped.
People moving on is not betrayal of what happened.
Then Dante and Elena had a daughter named Lucia.
No family-secret twist.
A baby.
At the hospital, Dante noticed every wristband.
He laughed at himself.
Elena asked:
“What?”
“Labels.”
She knew enough.
The nurse scanned mother and baby bands.
System matched.
Routine.
No special VIP process.
Dante liked that.
Then when Lucia was six months old, Elena’s mother asked for a house master card so she could come help anytime.
Sofia—now operations director—said:
“No master card.”
The grandmother looked offended.
“I’m family.”
“Yes.”
“Then?”
“Guest credential with recurring access.”
She received one.
Open:
main entry.
nursery corridor during approved hours.
kitchen.
Not:
security office.
staff records.
mechanical rooms.
The grandmother grumbled for two days.
Then forgot.
Boundaries survive inconvenience.
Then a new threat arrived at Romano company.
Not violent.
Cybersecurity.
A phishing campaign targeted warehouse supervisors using fake Crestline invoices.
Because attackers knew the old vendor relationship from public court records.
One supervisor clicked.
Credentials compromised.
No financial loss because multifactor blocked login.
The past created new attack surface simply by being public.
Security team updated training.
No panic.
Then Dante asked:
“Can we take old court records down?”
Lawyer looked.
“No.”
Of course.
Public truth has consequences too.
The answer was adaptation, not erasure.
Then one of the fake emails used Marco Velez’s dead name.
Someone had scraped case filings.
That hit Dante strangely.
A fake worker identity created by fraud was now being reused by unrelated scammers years later.
Names travel.
Data persists.
Romano scrubbed unnecessary old names from public-facing training materials but could not delete court record.
Again:
limits.
Then Sofia built one new policy:
incident reports use unique case identifiers in external training whenever real names are unnecessary.
Not secrecy.
Privacy.
Then Dante spoke at a logistics conference about vendor fraud.
He refused organizer’s proposed title:
HOW I SURVIVED AN INSIDE JOB.
Instead:
VERIFYING TEMPORARY LABOR AND THIRD-PARTY ACCESS.
Boring.
Exactly.
He said:
“Our failure was not one bad person. We had billing systems that accepted names without verifying bodies, access systems that trusted a cloneable master credential, and household practices where relationship substituted for authority.”
Then:
“Those are fixable. Human judgment remains imperfect.”
No mention Bianca by name.
No public punishment.
Then audience question:
“Would you ever trust a fiancée with access again?”
Dante smiled.
“My wife has the access she needs.”
Laughter.
Then:
“And no one gets access because of a title alone.”
That was the answer.
Then at home, Lucia threw a plastic key card from a toy hotel set into her cereal.
Dante stared.
Elena laughed.
“Trauma test?”
“No.”
He fished it out.
Lucia screamed because he removed her toy.
Normal.
Then Sofia visited for dinner.
Lucia handed her the wet plastic card.
Sofia looked at Dante.
“Master access?”
He laughed.
“Apparently.”
She tapped it against kitchen cabinet.
Nothing opened.
Good.
The five-year review also revisited employees whose identities had been misused.
Most had moved on.
Some wanted corrected letters for tax or employment records.
Crestline provided.
One man, Javier Ortiz, had spent years explaining why a payroll database showed him working in Chicago while he lived in Texas.
He joined the review call angry.
“I don’t care about your new software.”
Fair.
He wanted:
corrected wage statement.
letter explaining identity reuse.
reimbursement for accountant fees.
He got all three.
Then:
“Are you going to put my name in another report?”
“No,” Priya said.
Good.
The company had once treated names as convenient placeholders.
Now even remediation had to avoid turning people into examples without consent.
Then the review found one old worker profile still active in a test environment.
Not production.
No billing.
But the name remained.
Why?
Training database copied from old system.
The team deleted or anonymized legacy personal data.
A scandal can survive in test environments long after finance is clean.
That surprised everyone.
Then Lucia’s birth made Dante notice another kind of system.
Hospital wristbands.
medication scans.
matching labels.
He asked a nurse:
“What happens if scanner fails?”
“Manual verification with two identifiers.”
He nodded.
Elena laughed.
“Please don’t audit maternity.”
“I’m not.”
“You are visibly auditing maternity.”
He stopped.
The nurse smiled.
“We get fathers like this.”
Probably not exactly.
Then Dante held Lucia.
Small.
Angry.
Perfectly ordinary.
He realized how much of the last five years had been spent designing processes so one person’s certainty could not override everyone else’s reality.
Parenthood immediately offered the opposite temptation:
to believe his child should receive exceptions because she was his.
He made himself notice.
At home later, the nanny hiring process used the same rules as any household role.
Background check.
references.
defined access.
No shortcut because a cousin recommended someone.
The candidate from the cousin’s recommendation still got hired.
After verification.
Trust and verification did not have to be enemies.
Then Elena’s mother received recurring guest access.
The first week she tried to lend her credential to a florist because:
“I’m already approved.”
Sofia stopped her.
“The florist isn’t you.”
The grandmother was offended.
Then understood after five minutes.
One credential.
one person.
No identity lending.
The rule sounded obvious.
So had many rules before someone decided convenience deserved an exception.
Then Dante’s conference speech drew a question from a young operations manager.
“How do you know when enhanced monitoring has gone on long enough?”
Dante looked at Priya in audience.
She smiled.
He answered:
“Define the exit before you impose the control.”
Then:
“If clean audits for a stated period are enough, honor that. Otherwise you’re not managing risk. You’re preserving suspicion.”
That answer surprised him.
Five years earlier he would have wanted permanent watch over Crestline.
Now permanent suspicion looked like another way of refusing evidence.
Then a reporter asked whether Bianca deserved credit for finding the fraud.
“Yes,” Dante said.
The reporter looked surprised.
“And blame for the access breach?”
“Yes.”
Both.
The headline the next day was less interesting than the reporter wanted.
That was fine.
At the same five-year review, the board asked whether Romano should maintain a permanent blacklist of every person connected to the old fraud.
Priya said no.
Criminal convictions and active legal restrictions remained relevant.
Former Crestline employees who were never implicated did not belong on a moral database.
Vendor screening should ask:
current role.
current restrictions.
documented misconduct relevant to work.
Not:
were you employed at the wrong company during a scandal?
That prevented one former dispatcher from being rejected automatically when she later applied to a different logistics firm in Romano’s portfolio.
She had nothing to do with the fraud.
Her references were strong.
She was hired.
Dante heard only because audit committee highlighted the policy test.
He liked that more than he expected.
A system built after betrayal should not become a machine for inherited suspicion.
Then Lucia’s nanny lost her house credential at a playground.
She reported within ten minutes.
Credential deactivated.
No unauthorized use.
Replacement issued next morning.
The nanny apologized repeatedly.
Sofia said:
“You reported quickly. That is the behavior we want.”
No punishment.
If people fear reporting, lost credentials become hidden credentials.
That lesson had been expensive enough already.
The review ended with one final recommendation: keep testing the controls, but stop telling the same scandal story every time a badge is issued.
May you like
Systems should remember enough to prevent repetition without forcing every new employee to inherit old fear.
The board approved.
