Chapter 2
By two in the morning, the birthday dinner had become four separate investigations.
That was Michael’s decision.
He insisted on it because everyone else wanted to collapse the night into one accusation.
Vanessa hurt Mia.
Vanessa hid the drive.
Bellini Event Atelier appeared in the reconciliation.
The chief operating officer’s voice appeared in an audio file.
Those facts looked connected.
They might be.
But looking connected was not the same as proving one story.
So Michael split the work.
Security preserved the physical cake, pastry-room video, hallway video, and staff access logs.
Outside employment counsel took control of my injury complaint.
Cybersecurity imaged the USB and locked the original in a tamper-evident safe.
And an independent forensic-accounting firm received a copy of the financial files before anyone at Moretti Holdings could start explaining what they meant.
Luca hated that last part.
“They’re my records,” he said.
Michael stood across from him in the executive conference room.
“That is exactly why you should not be the first person interpreting them.”
Luca’s blue eyes narrowed.
“You think I’m compromised?”
“I think you are angry.”
“I think Vanessa is your fiancée.”
“I think Gabriel Ross is your COO.”
“And I think Bellini Event Atelier has been one of our preferred vendors for four years.”
Michael folded his hands.
“If this is real, everyone in this building has a reason to see what they expect.”
Luca looked through the glass wall toward the dark hotel corridor.
Then he nodded once.
“Fine.”
That was the first good decision of the night.
I was not there for it.
I was in urgent care with Rosa Delgado.
The doctor pressed carefully along my ribs.
“Tell me if the pain changes.”
“It already hurts.”
“I know.”
“I need to know where.”
The cuts at my waist looked worse than they were.
Long.
Shallow.
Messy.
They came from hardened sugar supports and the sharp edge of a stainless shelf, not from a knife.
The bruising worried me more.
The doctor ordered an X-ray.
No fracture.
He gave me instructions for pain, breathing exercises, and warning signs.
Then he looked at Rosa.
“She should not be working tomorrow.”
“She won’t,” Rosa said.
I looked at her.
“I need the shift.”
“You’re being paid.”
“By who?”
“The hotel.”
I stared.
Rosa’s voice softened.
“This is a workplace injury until somebody proves otherwise.”
“Workers’ comp is being opened.”
“You are not losing your pay because you got hurt at work.”
I almost cried.
Not because of the money.
Because nobody had said that before.
On the ride home, Rosa asked:
“Why did you tell the nurse it was a prep-room accident?”
I looked at the window.
“Because Vanessa was outside.”
Rosa stayed quiet.
Then:
“Did she threaten your job?”
“Yes.”
“What exactly did she say?”
I told her.
Rosa wrote it down.
Then I told her about the cake.
The USB.
Vanessa’s hand closing around my arm.
The table.
The door.
Everything.
When I finished, Rosa said:
“I’m sorry I didn’t get you off the floor sooner.”
“You tried.”
“I asked if you wanted to go home.”
“I should have asked whether you felt safe saying no.”
That was different.
Then she said:
“Did Vanessa ever threaten you before?”
“Not directly.”
“What does that mean?”
“She didn’t have to.”
Rosa understood.
Vanessa planned private events.
She changed seating.
She changed uniforms.
She requested certain staff.
She told managers which server Luca preferred.
She had once said a bartender was “not polished enough” and the man stopped being scheduled for Moretti family dinners.
Was that because Vanessa fired him?
No.
The events manager had reassigned him.
But employees saw:
Vanessa disliked someone.
Then that person disappeared from the family event list.
Cause becomes rumor quickly in a hierarchy.
By morning, Moretti Holdings had a different problem.
The spreadsheet on the USB contained eighty-seven lines.
Three years.
Twelve projects.
Six vendors.
Four hotels.
Two private family events.
The largest cluster involved Bellini Event Atelier.
But the accounting firm immediately found something important:
Not every duplicate-looking charge was fraudulent.
Some were legitimate:
deposit and final invoice.
Original invoice and tax adjustment.
Change order and corresponding credit.
Rush labor billed separately from base installation.
That mattered.
The raw spreadsheet looked explosive because whoever created it had intentionally gathered:
everything that might be wrong.
A reconciliation file is not a verdict.
The accountants reduced eighty-seven lines to:
twenty-two transactions requiring explanation.
Potential overbilling:
approximately $1.34 million.
Potential unsupported duplicate payment:
approximately $612,000.
Potential expenses later credited:
approximately $401,000.
And:
$327,000 in routing discrepancies where the vendor named on the invoice did not match the bank account owner.
That last category was the most troubling.
Bellini Event Atelier had sent invoices.
Some payments went to:
Bellini Event Atelier.
Others went to:
North Pier Production LLC.
Who owned North Pier?
A search showed:
Ethan Vale.
No obvious Bellini relation.
Then one accountant found:
corporate registration.
North Pier’s registered address:
same building as Gabriel Ross’s brother’s construction company.
Luca’s COO.
That was when the room stopped treating the audio file as coincidence.
Gabriel Ross had worked for Luca for twelve years.
Forty-eight.
Quiet.
Polished.
An operations man.
He had run hotel reopenings, labor disputes, emergency repairs, and acquisitions.
Luca trusted him enough that staff joked Gabriel was the only person who could tell Luca “no” and keep eating lunch.
Now Gabriel sat in a separate conference room with independent counsel.
He did not run.
He did not destroy his phone.
He did not ask for immunity.
He said:
“I want to know what file you found.”
Michael answered:
“You will receive specific questions through counsel.”
Gabriel looked tired.
Then:
“Is Vanessa involved?”
Michael did not answer.
Good.
No witness contamination.
The forensic analyst identified the audio file’s second voice as Gabriel with high confidence based on internal recordings.
But the recording was incomplete.
Six minutes long.
No metadata showing who recorded it.
The first thirty seconds began mid-conversation.
Vanessa:
“If Luca sees the raw reconciliation before the birthday, the whole Bellini account gets frozen.”
Gabriel:
“That is exactly why the drive cannot stay in finance.”
Vanessa:
“Then where?”
Gabriel:
“With counsel.”
Vanessa:
“Not Michael.”
Gabriel:
“Why?”
Vanessa:
“Because Michael will tell Luca.”
Gabriel:
“That is his job.”
Then a pause.
Vanessa:
“I need forty-eight hours.”
Gabriel:
“You’ve already had six weeks.”
That was not the conversation of two equal conspirators.
Not obviously.
Then Gabriel said:
“The finance analyst who built this is terrified.”
“She thinks the vendor structure is being used to hide pass-through charges.”
“If you want me to give Bellini time to explain, fine.”
“If you want me to bury it, no.”
Vanessa:
“I never said bury it.”
Gabriel:
“You asked me to move the drive.”
Vanessa:
“I asked you not to leave it in finance where thirty people can copy it.”
Then:
“Luca will destroy my brother before Julian even gets to explain.”
Julian.
Vanessa’s older brother again.
Not the same Julian from another story; this was a new continuity.
Julian Bellini served as managing director of Bellini Event Atelier.
He negotiated many Moretti contracts.
Then the audio became worse for Gabriel.
Vanessa asked:
“Who approved North Pier?”
Gabriel:
“I did.”
“Why?”
“Emergency production capacity.”
“They had the labor.”
“Did Luca know?”
“He knew we were using overflow vendors.”
“That is not what I asked.”
“No.”
Silence.
Then:
“Did Julian know?”
Gabriel answered:
“Yes.”
The accountants stopped the recording there.
Because now there were at least three people who knew North Pier had been inserted:
Gabriel.
Julian.
Vanessa.
But knowing about a subcontractor was not the same as knowing bank routing had been manipulated.
Then the file creator.
The spreadsheet properties listed:
Sofia Nguyen.
Senior finance analyst.
Twenty-nine.
Employed at Moretti Holdings for four years.
She had called in sick that morning.
Michael sent:
security welfare check?
No.
Too aggressive.
HR called:
personal number.
Sofia answered.
Crying.
She said:
“I’m not coming in.”
HR:
“Are you safe?”
“Yes.”
“Do you have company data?”
Silence.
Then:
“I made the drive.”
There.
“Did you put it in the cake?”
“No.”
“Did you give it to Vanessa?”
“No.”
“Who did you give it to?”
“Gabriel.”
The room changed.
Then:
“When?”
“Six weeks ago.”
“Why?”
“Because he told me he would take it to counsel.”
Did he?
Apparently not.
Then where had the drive been for six weeks?
Gabriel’s lawyer finally allowed:
one factual answer.
His client had placed it in:
locked executive safe
while ordering an internal review of Bellini invoices.
Why not tell Luca?
Gabriel said:
“Because I believed we had a vendor dispute, not a crime.”
“And because Luca and Vanessa were six weeks from their wedding.”
Michael stared.
“That is not a compliance reason.”
“No.”
Then:
“I wanted facts before I detonated his personal life.”
There.
Another person deciding:
when Luca deserved truth.
Then why move the drive from Gabriel’s safe?
Gabriel admitted:
Vanessa learned about the reconciliation
after Julian called her.
She confronted Gabriel.
Asked to see:
raw file.
He refused.
Two weeks later, his office safe was being replaced after a lock malfunction.
Gabriel transferred sensitive materials to:
temporary records safe.
The drive went missing.
When?
Three days before Luca’s birthday.
Gabriel reported:
missing media
to internal IT security.
But he described it as:
“unlabeled removable device.”
No content detail.
Why?
He did not want:
wider circulation.
Again.
Control.
Then Vanessa found it.
How?
She would have to answer.
At noon, Luca met her at her attorney’s office.
No private confrontation.
Vanessa wore no midnight-blue gown.
No diamonds.
Gray suit.
Hair pulled back.
No makeup.
She looked exhausted.
Her lawyer sat beside her.
Michael sat beside Luca.
Luca placed:
no USB on the table.
Only a list of questions.
“Did you remove the drive from Gabriel’s temporary records safe?”
Vanessa said:
“No.”
“Did Julian?”
“No.”
“Who did?”
She looked at her lawyer.
Then:
“Kira Bell.”
Luca’s face changed.
Kira was Vanessa’s executive assistant.
“Why?”
“I asked her to find it.”
There.
“Did you tell her to steal it?”
“No.”
“I told her Gabriel had a drive connected to Bellini billing and I needed a copy.”
Michael asked:
“Did she have authorization to enter Moretti executive records?”
“No.”
“Did you know that?”
“Yes.”
Then Luca:
“Did she copy it?”
Vanessa answered:
“No.”
“She took the original.”
“Why?”
“She panicked.”
“What did you do when she gave it to you?”
“I told her I would return it.”
“Did you?”
“No.”
“Instead you put it in my birthday cake.”
“Yes.”
Luca leaned back.
His voice stayed calm.
“Explain that.”
Vanessa’s eyes filled.
“I needed to get it out of the hotel.”
“Security had already started checking staff bags because Gabriel reported missing media.”
“My purse would be scanned.”
“Kira’s too.”
“The cake was leaving after dinner with the pastry staff.”
Luca stared.
“You were going to send it out in the cake?”
“No.”
“I was going to remove it after candles.”
“Then take it home.”
Michael asked:
“Why not destroy it?”
Vanessa looked offended.
“Because the data might be real.”
That answer mattered.
Then:
“Why not hand it to counsel?”
“I wanted Julian to see it first.”
There.
Family first.
Truth second.
Then Luca asked:
“Did you know Mia saw you?”
“Yes.”
“Did you grab her?”
“Yes.”
“Did you tell her to smile?”
Vanessa closed her eyes.
“Yes.”
“Did you make her carry the cake because you needed the drive to reach the table?”
Vanessa opened her eyes again.
“Yes.”
That was the ugliest answer.
Not because of the USB.
Because Mia’s body became:
transport.
Luca looked away.
Then Vanessa said:
“I didn’t think she was seriously hurt.”
“You didn’t check.”
“I was panicking.”
“That is not an answer.”
“I know.”
Then Michael asked:
“Did you know what the financial records showed?”
“Only that there were duplicate invoices, North Pier payments, and Julian’s name.”
“Did you know about the routing discrepancies?”
“No.”
“Did you know Gabriel approved North Pier?”
“After the audio conversation.”
“Did you know Julian knew?”
“Yes.”
Then:
“Did you know why?”
Vanessa shook her head.
“No.”
Forensic accounting still had work to do.
Then Luca asked:
“Are you asking me to believe your brother is innocent?”
Vanessa answered:
“No.”
That surprised him.
“I’m asking you to let facts decide what he did.”
Good.
Then:
“Why didn’t you give me the same courtesy?”
Vanessa looked down.
Because facts had been delayed:
to protect Julian.
Then the independent accountants found:
the first decisive document.
A North Pier invoice for a rooftop reopening at Moretti Hudson.
Invoice:
$186,400.
Bellini Event Atelier had already billed:
$186,400
for the same temporary staging labor
under a different description.
Both paid.
Who approved Bellini invoice?
Julian Bellini.
Who approved North Pier invoice?
Gabriel Ross.
Who approved payment batch?
Automated workflow after departmental approval.
Did either see:
the other invoice?
The system showed:
yes.
Gabriel opened Bellini invoice PDF
two days before approving North Pier.
Julian received:
North Pier cost report
the week after.
Then one email.
Gabriel to Julian:
We cannot carry both.
Issue credit on Bellini side.
Julian:
Will do after event reconciliation.
No credit ever issued.
Then three months later:
Gabriel:
Still open.
Julian:
Rolling into Q4 account adjustment.
No adjustment.
Then six months later:
Gabriel:
Close this.
Julian:
Handled.
It was not.
That changed the story.
The duplicate was not invisible.
It had been identified.
And then allowed to remain.
The question was no longer only:
Who created the duplicate invoice?
May you like
It was:
Why did two senior men who knew about it never make the money come back?
