She stared at the floor.
I understood then that she had not come to my desk because she supported the decision.
She had come because Greg had ordered her to bring the severance agreement and obtain my signature before the auditors arrived.
The timing was not cruel by accident.
It was strategic.
My mother’s funeral had given him an excuse to remove me before the audit committee could interview me.
He had expected grief to make me careless.
Instead, grief had stripped away the last reason I had to protect him.
Evelyn asked for the flash drive.
I gave it to her after she placed it in an evidence sleeve and recorded the transfer.
Greg watched every movement.
“There is nothing on that drive that cannot be explained,” he said.
Evelyn opened her locked case and removed a laptop that had never touched the company’s network.
She inserted the drive through a protected reader.
The first folder contained my emails requesting bereavement leave.
The second contained Greg’s instruction to destroy vendor reconciliation reports.
The third held invoices from three subcontractors: North Bridge Freight, Ardent Supply Services, and Wexler Route Consulting.
On paper, they were separate businesses.
In practice, they shared a mailing address, a registered agent, and a bank account routing pattern that led to the same private holding company.
That holding company belonged to Greg’s brother-in-law.
The invoices were small enough to escape casual attention but regular enough to become enormous over time.
Fuel surcharges on routes that had never been driven.
Safety inspection fees for inspections that had never occurred.
Emergency storage charges at warehouses that did not exist.
Each false charge passed through Greg’s approval queue.
When I first noticed the pattern, I assumed it was sloppy data entry.
I prepared a discrepancy report and sent it to him.
He called me into his office and closed the door.
“Some contracts are structured above your level,” he had said.
“My level requires me to flag duplicate billing.”
“Then flag it internally and let leadership decide.”
I did.
Leadership never saw my report.
Greg changed its status to resolved and attached a note claiming that I had entered the wrong vendor codes.
I found that alteration months later during audit preparation.
By then, the scheme had grown.
Evelyn opened another folder.
Inside were copies of safety reports from a regional warehouse where a loading platform had partially collapsed.
The original report blamed corroded support beams and overdue maintenance.
The version sent to the insurance carrier described the incident as employee misuse of equipment.
The original inspector’s signature had been copied onto the altered version.
The inspector had refused to approve it.
His email saying so was on the drive.
Greg began pacing.
“You have no context for those communications.”
“I asked you for context,” I said.
“Seven times.”
“You were not entitled to executive discussions.”
“I was entitled to accurate records.”
His eyes sharpened.
“You think this makes you a hero? You copied privileged files, disrupted operations, and contacted outsiders without authorization.”
Daniel Mercer’s voice still came through the phone on my desk.
“Ms.
Bennett contacted the confidential reporting line administered by our firm,” he said.
“The company’s policy specifically authorizes employees to report suspected fraud outside their management chain.”
Greg stared at the phone as though it had betrayed him personally.