Chương 2 - THE CAMERA OUTAGE
The child specialist met Mia three days later.
At a family-services office.
Not the estate.
Good.
Alina sat beside her.
Detective Harper watched through glass with Alina’s consent.
The specialist used dolls, pictures, and simple questions.
No leading.
No:
Was it Frank?
Was it a bad man?
Did he have a bomb?
Good.
Mia remembered:
rain.
a man.
a little light.
something black.
a hat.
That was all.
Then one useful detail.
“Did you see his face?”
Mia shook her head.
“Back.”
There.
He had faced away.
Fine.
“Did he come from the house?”
Mia thought.
Then pointed to a picture of a garage.
“Door.”
There.
Could mean garage door.
Could mean any door.
Not enough.
Good.
The interview ended after twenty minutes.
No repeat session unless genuinely necessary.
Fine.
Alina bought Mia a muffin.
Mia forgot about the car for twenty minutes and became furious because the muffin had blueberries.
Normal.
Then Vincent’s investigation.
Outside counsel hired:
independent digital forensics.
outside security consultant.
former federal vehicle-crime specialist.
Police retained criminal evidence.
Company review retained employment/governance evidence.
Separate.
Good.
Camera outage.
The “weather fault” was real in one sense.
Rain had caused intermittent signal problems at two exterior cameras.
There.
But the garage camera outage lasted twenty-six minutes because someone manually placed it into maintenance mode after the fault alert.
Credential:
F.CARUSO.
There.
Could credentials be shared?
Yes.
Old estate culture.
Bad.
Several supervisors knew one another’s backup credentials because weekend coverage was informal.
There.
So Frank’s login did not prove Frank.
Good.
New problem:
access controls themselves weak.
Then inventory.
The electronic modules had been purchased for “asset proximity testing.”
Legitimate security purpose.
Forty units.
Thirty-four accounted for.
three destroyed under decommission record.
two transferred to vendor.
one missing.
There.
The missing one could be the device.
Maybe.
Serial removal prevented certainty.
But internal board markings matched same model and procurement batch.
Good.
Then who signed destruction record?
Marco Bell.
There.
Not Frank.
Convenient answer shifted.
Marco worked in freight compliance now.
He had previously been operations liaison for Protective Intelligence.
He voluntarily met investigators with counsel.
Good.
He said:
three modules were destroyed.
Did he witness?
“No.”
There.
He signed because Frank told him the box was obsolete inventory.
Interesting.
Then Frank’s interview through counsel.
He denied:
camera shutdown.
device placement.
tampering.
He admitted:
sharing backup credentials.
There.
Why?
“Because if a gate failed at two in the morning, we fixed it.”
There.
Convenience.
Good.
Then:
“Did you tell Marco the modules were destroyed?”
“Yes.”
“Were they?”
“I believed they were.”
Fine.
Then one contradiction.
Frank said he was home during the rain outage.
Phone location records? Only with consent or subpoena. He voluntarily gave toll and vehicle records but not personal phone initially.
His household alarm log showed he entered home at 11:38 p.m. and did not open exterior doors until morning.
There.
Could leave through garage? Alarm included.
Likely home.
Not absolute.
Good.
Then Marco.
His badge accessed estate service garage at 1:36 a.m.
There.
He said:
he was at freight yard overnight.
Why badge at estate?
“I don’t know.”
Possible cloned credential?
shared badge?
false log?
Need investigate.
Good.
Then physical camera at freight yard showed Marco there at 1:41 a.m.
There.
Impossible to be estate miles away.
So his estate credential was used by someone else.
Another weak control.
Fine.
Then Dominic’s role.
Outside reviewer asked for security staff vulnerability profiles.
Vincent frowned.
“What profiles?”
Dominic went silent.
There.
That answer mattered.
Protective Intelligence had not only tracked external threats.
It maintained internal “reliability assessments.”
There.
Fields:
debt stress.
family instability.
substance concerns.
outside relationships.
likelihood of resignation.
grievances.
medical absence patterns.
Vincent stared.
“Who authorized this?”
Dominic answered carefully.
“You authorized internal threat assessment after the Valenti kidnapping attempt.”
There.
“I authorized conflict and threat review.”
“Yes.”
Then:
“Your father’s old security team already had personnel notes. We formalized them.”
There.
Did Vincent know these fields existed?
He had seen summary scores.
Not raw categories.
Good.
He had not asked.
There.
Then one profile:
Frank Caruso.
Risk:
moderate.
Reasons:
son’s gambling debt.
wife’s cancer treatment expenses.
recent disagreement over retirement.
There.
Vincent’s face hardened.
“Why do we have his wife’s cancer expenses?”
Dominic looked ashamed.
“Because financial stress was treated as vulnerability.”
There.
Another:
Alina Ruiz.
Vincent went still.
“Why is she in it?”
All household staff were screened.
There.
Her profile:
widowed.
medical debt: none.
dependent child.
sister in Waukegan.
former partner? No.
prior employer termination? Let's keep clean.
Then note:
Mia frequently present on east carriage wing.
There.
Vincent’s stomach turned.
“That is a three-year-old.”
Dominic said nothing.
Good.
Then Alina learned.
Not from rumor.
Independent privacy officer contacted affected employees after counsel determined notice was required.
Good.
She sat at Naomi? Need her own attorney maybe. At this point she may get independent employment counsel later. For now company notice says data collected.
Alina read:
dependent child—routine location.
There.
She went cold.
Mia had been mapped inside the estate.
Vincent’s system had known which window overlooked the garage.
There.
Could that help attacker?
Maybe.
No evidence yet.
But the data existed.
Alina called Ruth? no, different story. Let's introduce Teresa Molina, staff advocate from workers' legal clinic.
Good.
She asked:
“Can I see everything they have on me?”
Under Illinois privacy/employment law? Company agreed broader access voluntarily.
Fine.
She requested copy.
Then Vincent asked whether he could speak with her.
Through Teresa.
Alina said no.
Good.
He accepted.
Then police got a break.
The black module carried microscopic traces of a sealant used by a particular fleet vendor.
There.
No recipe.
No tactic.
Vendor:
North Shore Vehicle Systems.
Marchetti contractor.
It installed telematics and security electronics.
There.
Employees with access:
seven.
One had been at estate three nights before incident for routine service.
Name:
Darren Pike.
Thirty-eight.
technician.
no criminal history.
There.
Service ticket:
inspection of Vincent’s secondary SUV.
Not the targeted primary SUV.
But both were in garage.
Then video from a neighboring estate camera showed North Shore service van leaving at 5:22 p.m.
Not 2 a.m.
Fine.
Could device have been planted then?
Mia saw a man later.
Maybe second visit.
Maybe device adjustment.
No assumption.
Then company phone records showed Darren received calls from a prepaid number after midnight on two nights.
Police investigation.
Fine.
Then Vincent’s downtown meeting.
The shipping consortium had rescheduled.
One executive, Nathan Cole, complained that Vincent had embarrassed them.
Fine.
Then an interesting detail.
Nathan’s company was negotiating for a warehousing acquisition from Marchetti Freight.
Value:
$420 million.
Vincent’s attendance mattered.
Could motive be business?
Maybe.
No evidence.
Good.
Then Frank sent Vincent one message through counsel:
I did not touch your car. But I know why somebody knew the cameras could be put into maintenance mode.
There.
Vincent read twice.
Frank continued:
Because your father taught all of us that no system should ever stop the family from getting what it needed.
There.
The estate had “override culture.”
Every control:
someone could bypass.
For emergencies.
For convenience.
For power.
Good.
Frank’s last line:
You closed Protective Intelligence on paper. You never closed the habit.
There.
Vincent looked at Dominic.
Neither man spoke.
Because Frank might be innocent.
And still right.
The fleet review also found something that initially looked suspicious and was not.
Frank had ordered three replacement undercarriage shields the week before.
There.
The invoice looked like preparation.
It was not.
Maintenance records showed road damage on three SUVs after a construction detour.
Good.
Ordinary explanation.
Another item:
Marco Bell had searched “maintenance mode” in the security manual.
Suspicious.
Then investigators learned he had been troubleshooting a gate camera two weeks earlier.
Fine.
Not every coincidence becomes evidence.
That discipline mattered.
Vincent’s old organization had often done the opposite.
If someone looked dangerous, people found facts to match.
There.
Independent investigators forced chronology first.
Good.
Then Alina’s file request expanded.
She wanted:
who viewed her profile.
who downloaded it.
what vendors received it.
retention period.
whether Mia’s daycare information had been shared.
Fine.
The answer:
three internal analysts.
Dominic’s security office.
one vendor export that should not have included family details.
There.
The daycare name appeared only in early screening packet and had not been sent to vendors.
Good.
That reduced one fear.
Not all.
Then Alina asked:
“Why did they need my credit-summary indicators?”
Company counsel said:
legacy household-security standard.
Teresa corrected:
“That explains. It does not justify.”
There.
Good.
Vincent later read the same line in meeting minutes.
He underlined it.
Fine.
Then Dominic disclosed one reason profiles grew.
Three years earlier, a household employee had stolen jewelry after severe gambling debt.
There.
One case.
Security responded by expanding financial screening to everyone.
Good.
Classic overgeneralization.
Then two employees with high debt had spotless records.
One employee with no debt had later committed theft.
There.
Profiles predicted less than people believed.
Fine.
Independent review recommended:
financial screening only where legally permitted and role-relevant.
no ongoing monitoring absent cause.
no family-member debt fields.
Good.
Then Frank’s wife’s cancer expenses.
How had security learned?
Frank himself mentioned them in a request for schedule flexibility and a payroll advance years earlier.
There.
Information given for help migrated into security risk.
That was the harm.
Good.
A person asks for accommodation.
The system stores vulnerability.
Then Vincent ordered? Better board approved a policy after review:
benefits and accommodations separated from security analytics.
no downstream use without explicit legal basis.
Fine.
Then Frank learned his wife’s illness had been scored.
He was furious.
Even though the score had not caused discipline.
Good.
He filed privacy claim too.
Fine.
This prevented the story from turning him into only suspect.
Then Mia’s interview transcript.
Alina received a copy later.
It was short.
Mia had said:
“Black hat. Big shoes.”
There.
Nothing useful.
Good.
Children do not owe adults perfect memory.
Then one investigator asked whether Mia might identify a suspect from photos.
The child specialist said no.
There.
Too much risk of suggestion.
Good.
Police did not do it.
Fine.
Then Vincent asked Dominic:
“Would my father have?”
“Yes.”
There.
“Would you have?”
Dominic thought.
“Five years ago, yes.”
Good.
Vincent nodded.
A system can improve partly by choosing not to extract every possible piece of information.
That was new.
Then the shipping consortium meeting finally happened.
No one died because it moved three days.
Fine.
One executive said:
“Your security problem makes you look unstable.”
Vincent answered:
“Then price that risk into your offer.”
There.
Business continued.
Good.
May you like
Not every crisis needed secrecy to preserve reputation.
The world did not collapse because people knew something had gone wrong.
