Chapter 7 - The BreachThe attack began at 2:17 in the morning.
I knew the exact time because Grace woke at 2:16.
She was teething.
I lifted her from the crib, carried her into the rocking chair, and had just convinced her that the entire world was not ending when my phone vibrated.
Tessa.
No one calls at 2:17 a.m. with good news.
I answered quietly.
“What?”
“We have a breach.”
Every trace of sleep disappeared.
“What system?”
“Intake portal.”
“Confirmed?”
“Confirmed.”
“How deep?”
“Unknown.”
“Containment?”
“In progress.”
I stood, balancing Grace against my shoulder.
“Beneficiary records?”
“Possibly.”
That one word changed everything.
“I’m coming in.”
“Claire—”
“I’m coming.”
Dad appeared in the hallway five minutes later wearing a robe and carrying his phone.
He had been staying in the guest suite during a renovation at his Beacon Hill apartment.
His hair pointed in three directions.
It was the least intimidating I had ever seen him.
“What happened?”
“Foundation system.”
“How bad?”
“Don’t know.”
“I’ll take Grace.”
I hesitated.
Not because I distrusted him.
Because motherhood rewired risk.
Leaving your baby at two-thirty in the morning felt wrong even when the rational part of your mind knew she was perfectly safe.
Dad saw it.
“Go.”
I kissed Grace’s forehead.
She immediately grabbed my hair.
“Traitor,” I whispered.
She laughed.
Twenty-seven minutes later, I entered the foundation’s operations floor.
Tessa stood beside three analysts.
Screens filled the room.
We had designed the network assuming breach.
No system was invulnerable.
The important question was how much damage a compromised account could cause.
The attacker had obtained credentials belonging to a temporary contractor.
Multifactor authentication should have stopped them.
It didn’t.
The attacker used a stolen session token.
Sophisticated enough to matter.
They accessed the public intake system.
Attempted privilege escalation.
Queried beneficiary metadata.
Triggered an anomaly alert.
Our automated controls isolated the environment six minutes later.
“Did they reach case notes?”
I asked.
Tessa shook her head.
“We don’t think so.”
“Don’t think?”
“Encrypted storage appears untouched.”
“Appear?”
“Claire.”
She stared at me.
“We are thirty-two minutes into this.”
Right.
I knew better.
Incidents required discipline, not panic.
“Okay.”
I removed my coat.
“Preserve everything. Rotate credentials. Force session invalidation across all privileged systems. Shut external intake temporarily.”
“Already happening.”
“Notify counsel.”
“Done.”
“Outside incident-response team?”
“On their way.”
“Law enforcement?”
“Martin is handling.”
I took a breath.
This was familiar.
The strange thing about crisis was how comforting competence could feel.
For two years in my marriage, Daniel made me question decisions I had once made instinctively.
Too aggressive.
Too suspicious.
Too controlling.
Now, standing beneath fluorescent office lights at three in the morning, I remembered exactly who I had been before him.
We traced the intrusion.
The attacker had not moved randomly.
They searched specific case identifiers.
Three of them.
One belonged to Mia.
My blood turned cold.
“Tessa.”
“I see it.”
Another case involved a teacher leaving a controlling spouse.
The third belonged to a woman whose ex-husband had recently violated a restraining order.
This was not Robert.
At least not obviously.
The attacker was targeting people.
Not Mercer financial information.
At 4:08 a.m., Tessa isolated the earliest malicious request.
The login originated through a compromised commercial server.
But one earlier reconnaissance attempt had failed to mask properly.
An IP address.
Residential.
New Jersey.
The name associated with the account appeared forty minutes later.
Peter Carter.
Mia’s husband.
I sat back.
“Call Martin.”
“He’s on his way.”
Peter had apparently hired a private digital investigator after Mia left.
The investigator later claimed he believed he was conducting legitimate marital asset recovery.
Maybe that was true.
Maybe not.
But someone used credentials stolen from one of our contractors to search for Mia’s location data.
They did not find it.
We did not store shelter addresses in the intake environment.
That decision had seemed paranoid when I designed the architecture.
At five in the morning, it seemed brilliant.
Mia and her children were moved from their temporary apartment before sunrise.
Police were notified.
Her attorney obtained emergency protective relief.
We contacted every potentially affected beneficiary.
Not because regulations required immediate disclosure in every instance.
Because trust did.
By seven, I had consumed four coffees and forgotten all of them.
Then Daniel called.
I stared at the screen.
His scheduled visit with Grace was at nine.
I answered.
“Hello?”
“Is Grace okay?”
The question hit me unexpectedly.
“Yes.”
“I heard something happened at the foundation.”
“How?”
“My father.”
I stood.
“Your father knows?”
“He called me ten minutes ago.”
“How does he know?”
“I assumed it was public.”
“It isn’t.”
Silence.
My entire body tightened.
“Daniel.”
“I don’t know.”
“Where is Robert?”
“I have no idea.”
“You understand why this is a problem.”
“Yes.”
“Find out.”
“I’ll call you.”
“No.”
I closed my eyes.
“We are not doing that.”
“Doing what?”
“You do not investigate your father for me. You tell Martin exactly what Robert said and how he knew. Then professionals handle it.”
A pause.
“You’re right.”
That was new.
“I’ll call Martin.”
“Good.”
“And Claire?”
“What?”
“If you need to cancel my visit, I understand.”
I looked at the clock.
Grace was safe with Dad.
Daniel’s visit was scheduled.
Our incident did not change his right to see her.
“No.”
“You’re sure?”
“Yes.”
“Okay.”
He hesitated.
“I hope Mia’s okay.”
I froze.
“How do you know her name?”
Another silence.
Longer.
“I don’t.”
“You just said Mia.”
Daniel inhaled.
“My father said a woman named Mia Carter caused the problem.”
Every analyst within ten feet seemed to stop moving.
I put the call on speaker.
“Repeat exactly what Robert told you.”
Daniel’s voice changed immediately.
He understood.
“He called at six fifty-two. He said your foundation had been hacked because one of the women you help brought trouble to your door. He said her name was Mia Carter.”
“Anything else?”
“He said this proved he was right about Grace.”
“How would he know?”
“I asked.”
“And?”
“He said Sloane had people watching public court activity.”
“This isn’t public.”
“I know.”
Martin entered the room as I spoke.
I held up a hand.
“Daniel, don’t contact Robert again.”
“He’ll know something’s wrong.”
“He already does.”
“I mean—”
“I understand.”
Martin approached.
“Daniel?”
“Yes.”
Martin took the phone.
“Do not delete your call log. Do not alter your device. Screenshot nothing. Forward nothing. We will arrange preservation.”
Daniel gave a tired laugh.
“You really do think everyone in my family is evidence.”
Martin replied, “Experience has encouraged the habit.”
We ended the call.
The investigation shifted.
Peter Carter remained the primary suspect behind the breach.
But Robert somehow knew information he should not have known.
By noon, we discovered the explanation.
It was simpler than espionage.
More embarrassing too.
One of Gregory Sloane’s junior associates had a college roommate working at the cybersecurity incident-response vendor.
The vendor employee had seen Mia’s name in an internal emergency ticket, recognized it from a custody document request Sloane’s office had discussed, and texted his friend.
The friend told Sloane.
Sloane told Robert.
No grand conspiracy.
Just careless people passing confidential information because each believed the next person was entitled to know.
That did not make it harmless.
The vendor employee was terminated.
Our contract was suspended pending review.
Professional complaints followed.
Sloane’s firm opened an internal investigation.
Robert had not orchestrated the breach.
I felt something surprising.
Relief.
Not because Robert was innocent of everything.
Because facts mattered more than the story I feared.
That night, I returned home exhausted.
Dad sat on the floor beside Grace.
Blocks were scattered everywhere.
“She rejected capitalism,” he said.
“What?”
“I built a tower.”
He pointed toward the ruins.
“She redistributed it.”
I sank onto the couch.
Grace crawled toward me.
I lifted her.
She smelled like baby soap.
Dad watched me.
“You saved those records.”
“The system saved them.”
“You designed the system.”
“A lot of people did.”
“You came back.”
I looked at him.
“To cybersecurity.”
I hadn’t thought of it that way.
The foundation had allowed me to help people.
But the breach reminded me of something I had buried after the company sale.
I loved the work.
Not the money.
Not the acquisition.
The problem-solving.
The moment when chaos turned into patterns.
The certainty of evidence.
Daniel had never taken that from me.
I had simply stopped reaching for it.
My phone buzzed.
A message from Tessa.
MIA AND KIDS SAFE.
Peter had been questioned.
Evidence suggested he had paid for the intrusion.
The legal process would take time.
But tonight, they were safe.
I showed Dad.
He nodded.
Then Grace grabbed my phone and tried to chew it.
“Excellent security hygiene,” Dad said.
I laughed.
For the first time in days, the sound felt easy.
Later, after Grace slept, I stood at my bedroom window.
Boston glittered beneath winter darkness.
For years I had imagined safety as a door you could close.
A house no one could enter.
A bank account no one could touch.
A life no one could disrupt.
I understood now that safety was not the absence of threat.
It was the ability to respond when threat appeared.
It was architecture.
Evidence.
People you trusted.
Boundaries that held under pressure.
May you like
I had built those things for strangers.
I was finally building them for myself.
