Chapter 3 - THE EXPLANATION I WANTED TO BELIEVE
I spent the night at a hotel near Reston.
At seven the next morning, Mariana knocked on my door.
I did not let her inside.
We spoke in the lobby with Rebecca participating by phone.
Mariana had changed out of her office dress. She wore jeans, a gray sweater, and no diamond earrings. Without the polished uniform of Vithera, she looked like the woman I had met in Georgetown eight years earlier.
That familiarity made her more dangerous to me.
“I can explain Northstar,” she said.
“Start with why its debt belongs to me.”
“It was supposed to be a tax-efficient consulting structure for us.”
“I had never heard its name.”
“You signed documents.”
“A guarantee was notarized while I was in Baltimore.”
“You signed electronically before you left. Clarissa completed the acknowledgment later.”
“Why did you write instructions about my location?”
Her eyes flickered.
“You read my desk.”
“I opened mail addressed to me.”
“That note was about correcting a technical problem.”
“Two-point-four million dollars is not technical.”
Mariana leaned forward.
“Rodrigo created most of this.”
There it was—the explanation I had expected.
She described Rodrigo as controlling and vindictive. According to her, he discovered that she had created Northstar to receive legitimate consulting commissions Vithera refused to pay her directly.
“He threatened to report it as a conflict,” she said. “Then he started using the company for transactions I didn’t approve.”
“And sleeping with him prevented that?”
Her face tightened.
“It began as pressure.”
“The kiss I saw did not look like pressure.”
“You saw ten seconds.”
“I heard the conversation before the kiss.”
She lowered her voice.
“I made mistakes, Ethan. But I was trying to keep Rodrigo from attaching this to you.”
“He attached my name before any money moved.”
“I thought I could close the company before you discovered it.”
“What was happening last night?”
“He wanted me to sign a transfer agreement.”
“Transferring what?”
“All operational liability to a holding company.”
“Whose holding company?”
She looked away.
“Mine.”
Rebecca interrupted through the phone.
“Mariana, you are represented by counsel now. You should not make further statements without that attorney.”
Mariana looked toward the phone.
“I’m speaking to my husband.”
“You are discussing documents connected to a possible identity-theft report and a corporate investigation.”
Mariana stood.
“This is exactly what Rodrigo wanted. He wanted us separated so he could control the narrative.”
“You planned to leave me,” I said.
“No.”
“You had suitcases packed.”
“I needed space.”
“Before I caught you?”
She had no answer.
I filed an identity-theft report with Fairfax County police that afternoon. The detective explained that the report would begin a process, not produce an immediate arrest.
Banks needed to preserve records. Signatures required examination. Electronic access logs had to be obtained through consent, subpoenas, or court orders.
I also notified the Federal Trade Commission and disputed the commercial debt in writing.
My employer placed me on paid administrative leave.
Because I consulted on medical-distribution routes and vendor compliance, an undisclosed ownership interest in Northstar created a conflict even if my identity had been stolen.
“We are not accusing you,” my director said. “We have to verify.”
I understood.
That did not make surrendering my badge easier.
Vithera suspended Mariana and Rodrigo pending its internal review. Judith Lane contacted David and asked permission to share information with outside counsel.
Northstar had submitted invoices connected to a federally funded emergency-medication program.
The matter was no longer merely corporate.
The Office of Inspector General for the Department of Health and Human Services had been notified.
That evening, David received the electronic certificate attached to the disputed guarantee.
It showed the document had been signed using my email account and authenticated from the IP address assigned to our house.
Mariana had been home.
I had been in Baltimore.
“That supports your position,” David said. “But it isn’t conclusive. Your account could have been accessed remotely.”
The investigators obtained my email activity from that night.
At 2:13 a.m., my account sent Rodrigo a message approving Northstar’s use as a Vithera vendor.
At 2:18 a.m., I personally sent my hospital team a medication-temperature report.
Both emails came from the same account within five minutes.
One made me look guilty.
The other proved I had been actively working.
Then the forensic examiner identified the devices.
The hospital report came from my laptop in Baltimore.
The Northstar approval came from a computer registered to Mariana.
Someone had used my password from our home.
But the message contained a sentence that made my blood run cold.
May you like
Thank you for protecting Mariana. Once the audit closes, she’ll be free of me.
The plan to remove me had been written in my own name fifteen months before I overheard Rodrigo say it aloud.
