Chapter 4 - A DOOR ETHAN COULD NOT LOCK

The temporary protective order barred Ethan and Judith from contacting me or approaching Tessa’s townhouse, where I would stay after discharge.
It did not return my money.
It did not clear my name at work.
It did not prevent Ethan from telling relatives that I had attacked his mother, stolen from my employer, and invented an injury after “an emotional episode.”
My attorney, Rachel Kim, advised me not to answer the family group messages. She helped me file an identity-theft report with the bank and preserve the resignation email, payroll alerts, account history, hospital records, and photographs.
“Do not sign anything Ethan sends,” she said. “Do not access the Prescott house without police standby. Do not try to investigate company systems yourself.”
“I’m a payroll analyst. Investigation is what I do.”
“You’re also the person whose credentials were used. That makes discipline important.”
The first active step I took was simple: I redirected my paycheck into an account Ethan had never touched.
The second cost more.
I froze the joint credit line.
Within an hour, Ethan’s attorney emailed Rachel claiming the freeze threatened Leonard’s medical care and the family business’s payroll obligations. The message included no explanation for why either depended on a credit line funded by my salary.
That afternoon, Priya called from a conference room with Sonoran’s compliance director.
They had discovered my authentication profile had been changed seven months earlier. Security alerts had been redirected from my phone to a secondary number ending in 4419.
I recognized it as Ethan’s.
The request to change the number had been submitted through my employee portal while I was attending a payroll conference in Denver. My password had been entered correctly. The security question had also been answered correctly.
The question was the name of my childhood street.
Ethan did not know it.
Leonard did.
Two Christmases earlier, he had sat beside me while I filled out a credit-union application after Ethan insisted we consolidate our accounts. Leonard had commented that my childhood street shared a name with the neighborhood where he grew up.
I had forgotten the conversation.
Someone else had not.
Compliance also found that a replacement hardware token had been mailed to my home after the authentication change. I never received it.
The original token in my laptop bag had continued working for ordinary logins. The replacement could authorize higher-risk payroll entries without triggering my usual text notifications.
Whoever planned the scheme had not simply stolen a password.
They had studied the company’s controls.
Rachel arranged a police standby so Tessa could retrieve clothing, medication, and personal records from the Prescott house. I remained in the car because climbing the front steps on crutches was impossible.
Ethan watched from an upstairs window.
When Tessa returned, she placed a cardboard box on the back seat.
“Your files were already packed,” she said.
Inside were tax returns, insurance records, my passport, and the old credit-union application containing my security answers.
At the bottom lay an empty envelope from Sonoran’s security department.
It had once contained the replacement authentication token.
Across the front, in Leonard’s handwriting, were three words:
Claire—work device. Important.
May you like
Leonard had received the token.
The question was whether he had handed it to Ethan or kept it for himself.