Chapter 21: The Phone Call From Apex

Apex’s customer-service number began directing callers to a disconnected line.
A woman named Teresa Flint contacted Miriam because she had received a consulting agreement from Apex only days before the website vanished.
The agreement promised discreet monitoring of sensitive documents associated with luxury vehicles.
It also required customers to waive claims for unauthorized disclosure under terms that Miriam described as extremely broad.
Teresa had never authorized Northline or Apex to photograph the estate documents she kept in her car.
She had scheduled a consultation because a caller claimed her family papers were already circulating online.


The caller used a personal detail that made the threat sound credible.
Teresa had saved the voicemail.
She played it for the investigator rather than for the neighborhood rumor mill.
The voice belonged to Marcus, according to Teresa, who had met him during an earlier visit to Northline.
Voice recognition by a witness was useful, but investigators still sought call records and other confirmation.
Teresa told me that she had almost concealed the incident from her adult children.
“I was embarrassed to admit that somebody had used my fear against me,” she said.
I asked whether she wanted an introduction to other affected customers who had chosen to share their experiences.


She did.
Within a week, five people formed an informal support group with help from a local consumer advocate.
They did not discuss their private documents.
They discussed how to respond to threats, preserve evidence, and avoid paying strangers who claimed they could protect information they might already have stolen.
Their practical courage impressed me more than any confrontation I had imagined having with Marcus.

Chapter 22: The Name on the Payment Account

A financial investigator discovered that the account receiving Apex subscription payments belonged to a limited liability company registered by Denise.
The company was called Mercer Strategic Solutions.


Denise had disclosed the company in a public filing, but the website offered almost no explanation of its services.
Money from Apex clients had moved through that account before being transferred to other business expenses.
I learned the broad outline from documents later made public during the legal proceedings.
At the time, Miriam cautioned that a financial connection did not automatically prove Denise knew how Marcus had obtained his information.
That was an important limitation.
I wanted certainty, and the case had not yet earned it.
Denise’s attorney insisted that his client was merely a passive investor.
Marcus’s attorney characterized the disputed customer photographs as legitimate business records.


Both positions would eventually face scrutiny.
I kept running Northline while investigators gathered evidence.
I repaired the company’s internal access controls and commissioned an independent review of data retention practices.
The reviewer found procedures that had been reasonable for a small shop but inadequate for a company handling more sensitive customers.
I could have blamed Marcus for exposing the weaknesses.
Instead, I paid to fix them.
Our company had grown faster than our safeguards.
That fact was mine to acknowledge.