Chapter 3 - The Missing Backpack
Lily’s surgery lasted four hours.
I stayed.
Reyes arrived halfway through.
He looked older.
Broad shoulders.
Gray at temples.
Still walked like every doorway might become important.
He did not salute.
Thank God.
“Daniel.”
“Miguel.”
We shook hands.
Then he hugged me.
I had not expected.
“Twenty years.”
“Twenty.”
He looked toward operating wing.
“How bad?”
“Six fractures.”
His face tightened.
“Jesus.”
Then two others joined him.
Special Agent Maya Chen.
I knew the name, not woman.
Cyber and financial investigations.
And Assistant U.S. Attorney Leah Kane.
Early forties.
No patience visible.
Reyes introduced.
I said:
“You brought prosecutor.”
Kane answered:
“I brought myself because a restricted research matter may now involve violent obstruction.”
Good.
Then Detective Ellis arrived with his lieutenant, Captain Warren Bell.
Bell looked unhappy.
Not corrupt.
Overwhelmed.
He shook hands.
“We need coordinate.”
Kane:
“Yes.”
Bell:
“University counsel is demanding access to evidence.”
“No.”
Bell looked at her.
“Exactly.”
That made me like him more.
Then missing backpack.
Campus security report said no backpack was recovered where Lily was found.
But first responder body camera showed a backpack?
Ellis had requested footage.
At 10:59 p.m., campus EMT arrived.
Lily lay near stairwell.
No backpack visible.
At 10:43, a student called 911 from street after seeing Lily stumble from garage.
Where was backpack between assault and exit?
Taken.
Then garage access.
Lily’s car remained on level three.
Door ajar.
Blood near pillar.
Broken phone pieces.
One torn strip of sweatshirt.
No backpack.
Campus cameras allegedly failed from 10:21 to 11:08.
Only garage?
“Yes.”
Why?
Security contractor claimed firmware update error.
Emergency call stations failed same period.
Same network.
Maya Chen said:
“That’s not firmware.”
“How know?”
“Call boxes run separate failover channel.”
Ellis looked.
“You’re sure?”
“Yes.”
“If both went down exactly same time, somebody either cut shared upstream infrastructure or disabled independently.”
Then Reyes:
“Who manages?”
Northbridge Public Safety Technology Services.
A contractor.
Owned by?
A subsidiary of Cole Urban Development.
Ethan Cole’s family.
I felt old instincts rise.
Kane looked at me.
“Do not.”
“I didn’t say anything.”
“You have a face.”
Reyes smiled.
“He does.”
Then financial conflict.
Cole Urban had donated $18 million to Northbridge over six years.
Built two dormitories.
Operated parking technology through subsidiary.
That did not prove sabotage.
It created access.
Then Tyler Whitmore.
University records showed he was not a Northbridge student.
He attended Georgetown business program? Better local. He was enrolled at nearby Potomac Institute, but had guest research access because Whitmore Defense sponsored Northbridge lab.
Ethan and Brandon attended Northbridge.
All three friends from high school.
Why were they in garage?
Unknown.
Then Lily’s old email.
Kane obtained emergency preservation, not content access yet.
Warrant expedited.
I gave proof account originally Anna’s but Lily used.
No shortcut because father.
Then surgery finished.
Dr. Morris came.
“Procedure went well.”
I nearly collapsed.
“They stabilized fractures. She’ll remain admitted.”
“Can I see?”
“Soon.”
Then Reyes waited until I breathed again.
“We found something.”
“What?”
“Tyler’s phone location.”
“How?”
“Active federal investigation already had lawful historical data preservation from previous warrant scope.”
He chose words carefully.
“At 10:17 Tyler’s device entered Northbridge campus.”
“Garage?”
“Location not precise enough.”
“After?”
“Device went offline 10:36.”
Attack around 10:38.
“Back?”
“Online 11:24 near Whitmore estate.”
“What about Ethan?”
Local investigators would warrant.
“Brandon?”
Same.
Then Kane:
“One more issue. Tyler was scheduled to fly to London tomorrow.”
“Why?”
“Whitmore company conference.”
“Still?”
“We’ve notified appropriate agencies. No action without probable cause.”
Good.
No vigilante passport seizure.
Then Ellis got warrant for university network logs.
Campus IT resisted? Legal process overcame.
By 2 a.m., logs showed camera system was not broken.
Administrator credentials manually disabled recording on garage levels two through four.
Login came from an internal security terminal.
User account:
GREGORY LANE.
Northbridge deputy security director.
Where was Lane?
According to university:
On vacation in Florida.
Maya asked:
“Did account use multifactor?”
“Yes.”
“Then either Lane did remotely or credentials cloned.”
Then emergency call boxes:
Maintenance override entered using supervisor credential.
Same user.
Lane.
Two systems.
Deliberate.
Then a call.
Florida law enforcement located Gregory Lane at hotel.
He said he had not logged in.
His phone showed authentication prompts overnight.
He denied approving.
Could be credential theft.
No automatic corruption.
Then IP address.
Login originated not campus.
From a Cole Urban Development network office four blocks away.
Reyes looked at me.
“Now we have probable cause movement.”
Kane corrected:
“We have probable cause to ask for more warrants.”
He smiled.
“Prosecutor.”
Then Lily’s email warrant returned content.
Draft message.
Timestamp 9:52 p.m., forty six minutes before attack.
To: unsent.
Subject: If something happens.
Attached:
CSV access log.
Three screenshots.
A photograph.
Kane opened only after chain.
The log showed repeated downloads of Aurora Nine restricted project files.
User:
TWHITMORE_GUEST.
But downloads were approved through another credential.
DR. STEPHEN MARROW.
Northbridge faculty researcher.
Professor Stephen Marrow.
A man who officially died eight months earlier.
His account should have been disabled.
Someone had resurrected a dead professor’s access.
The photograph Lily attached showed Tyler Whitmore inside the lab the previous week.
Standing beside a laptop.
And behind him was Ethan Cole.
Then Lily’s draft text:
I confronted Tyler tonight. He said I had no idea what our families could erase.
Our families.
May you like
Not family.
She had suspected more than Tyler.
