The board meeting ended without a vote.
Nobody needed to formally adjourn it.
The Ohio message transformed corporate governance into an active emergency.
Eleanor stood.
“Conference room downstairs. Now.”
Samuel Hargrove followed without argument.
So did two other directors.
Walter was waiting outside.
He saw our faces.
“Ohio?”
I stopped.
“How do you know?”
“Naomi texted.”
He held up his phone.
“I’ve entered the twenty-first century.”
We moved downstairs.
The affected company was Grant Motion Technologies, a manufacturer of precision actuator components.
Their customer certification team represented a major aerospace program.
Phase Two had predicted the event.
Not approximately.
Exactly.
Ohio.
Customer certification.
Primary machining line.
The only discrepancy was timing.
The planned date in Tyler’s copied files was next Monday.
The attack had happened Thursday.
Four days early.
Naomi joined the emergency call with Grant Motion’s engineering manager, cybersecurity lead, and plant director.
I listened while they described the fault.
Three machines had entered protective shutdown within ninety seconds.
Different models.
Different control generations.
That ruled out a common mechanical failure.
“Shared network?” I asked.
“Yes.”
“Shared vendor gateway?”
A pause.
“Yes.”
“Disconnect it.”
The cybersecurity lead said, “Already isolated.”
“Any active remote sessions?”
“None now.”
“Before isolation?”
“We have one.”
“Account?”
“Manufacturer support.”
“Was support scheduled?”
“No.”
Naomi asked for the source information.
The address belonged to another commercial cellular provider.
Portable again.
Harder to attribute quickly.
I asked, “What commands were issued?”
The engineering manager read the logs.
Machine One: axis compensation changed.
Machine Two: thermal correction table altered.
Machine Three: tool-length reference modified.
Same philosophy.
Different parameters.
No dramatic destruction.
Just enough uncertainty to make an entire line untrustworthy.
Samuel Hargrove stood behind us listening.
“This is what you were describing upstairs.”
“Yes.”
“And it happens during our meeting.”
“Yes.”
He looked toward Eleanor.
“That timing is difficult to dismiss.”
Nobody disagreed.
Grant Motion had validated backups.
We restored one machine remotely under their engineering team’s control while preserving the original state.
The second required local verification.
The third presented something unusual.
Its controller showed the parameter modification at 10:14.
The network gateway showed the remote session beginning at 10:19.
I stared at the timestamps.
“That’s impossible.”
Naomi leaned closer.
“What?”
“The parameter changed five minutes before the remote connection.”
The engineering manager said, “Clock drift?”
“Check controller time against plant time.”
They compared.
Eleven seconds difference.
Not five minutes.
Naomi checked gateway synchronization.
Accurate.
“So the remote session didn’t make the change?” Eleanor asked.
“Not that session.”
Walter leaned over the table.
“Somebody was already inside.”
Maybe.
Or the change had been staged earlier.
“Show the full parameter history,” I said.
The engineering manager exported it.
At 8:52 that morning, the same manufacturer-support account had authenticated locally.
Not remotely.
Local network.
Inside Grant Motion.
“Who’s on site?” I asked.
The plant director answered.
“Employees and the customer certification team.”
“Vendors?”
Silence.
“One.”
“Who?”
“Independent automation consultant.”
My stomach tightened.
“Name?”
“Martin Vale.”
Naomi searched Richard’s recovered records.
Nothing.
Tyler’s partial database.
Nothing.
Phase Two files.
Then she stopped.
Initials.
MV.
One of the unidentified collaborators.
Samuel saw it.
“Is that him?”
“We don’t know.”
“Where is he now?” I asked.
The plant director spoke to someone off the call.
A minute passed.
Then two.
“He left.”
“When?”
“About ten minutes ago.”
“Before or after the machines failed?”
“After.”
“Why?”
“He told reception he needed equipment from his vehicle.”
“Did he return?”
“No.”
The cybersecurity lead checked badge records.
Martin Vale had entered at 7:48.
He had access to the production floor.
He had been escorted initially.
At some point, he was left alone while the engineering manager met with the certification team.
The local authentication occurred during that window.
There was our likely path.
Not proof of identity.
A path.
Naomi requested preservation of security footage.
The attorney contacted investigators.
The plant director sounded furious.
“He was recommended by Northstar.”
Of course.
“How long have you used him?”
“First visit.”
“Who arranged it?”
“Richard Cole.”
Samuel closed his eyes.
The network was no longer theoretical to anyone.
We continued restoring the line.
Machine One returned to service.
Machine Two followed.
Machine Three remained isolated because its history required forensic preservation.
The customer certification team agreed to continue with the two verified machines after reviewing documentation.
A disaster became an inconvenience.
That was progress.
But I couldn’t stop thinking about the impossible timestamp.
The cellular remote session began after the first parameter change.
Why connect remotely afterward?
Naomi had the same question.
“Maybe monitoring.”
“To see whether the failure worked?”
“Possible.”
Walter shook his head.
“Or to make us blame whoever owns the remote connection.”
I looked at him.
That was better.
Someone inside changes the machine.
Then someone outside connects through a compromised account.
Investigators find the obvious remote trail.
The local actor disappears.
Misdirection.
Richard and Adrian had learned from Horizon.
Audit logs exposed Tyler.
So Phase Two separated the actions.
One person altered equipment locally.
Another created remote noise.
Cleaner separation.
The phrase from Richard’s old email returned to me.
Technical staff were too close to cause.
Need cleaner separation next time.
They had refined the method.
I told Naomi.
She searched Phase Two for the phrase.
One document contained a section titled Separation Protocol.
Local technical action.
Independent remote authentication.
Distinct credentials.
No shared timing.
The investigator on the call asked us to stop reading further until they could coordinate handling.
We did.
But we had seen enough.
There were local collaborators.
Not just Richard.
Not just Adrian.
People entering factories under legitimate consulting roles.
The database wasn’t merely a target list.
It was an operational map.
At 2:36, investigators located Martin Vale.
He had not gone far.
He was sitting in a rental car at a service plaza twenty miles from Grant Motion.
They detained him for questioning under whatever authority they had developed.
We were not given details.
That was fine.
I wanted machines safe.
Law enforcement could handle people.
Then Naomi received a provider response.
One of the legal requests had returned subscriber information for the cellular gateway used during Benton’s active session.
She read it silently.
Her expression became strange.
“What?”
“The account isn’t Adrian’s.”
“Richard?”
“No.”
“Northstar?”
“No.”
Walter said, “Stop making us guess.”
Naomi turned the screen.
The cellular account belonged to Tyler Brennan.
Nobody spoke.
Eleanor sat down.
“That doesn’t mean Tyler used it,” I said immediately.
The attorney nodded.
“Correct.”
But it meant his identity had.
Naomi checked the second gateway.
Trellis.
Same subscriber.
Tyler.
My mind raced backward.
Tyler confessed to changing Bay Three.
Tyler had copied the database.
Tyler had given us access to his server.
Then the server conveniently went offline after thirty-one percent transferred.
He had told us about Phase Two.
He had provided the drive location.
That cooperation was real.
Unless it was selective.
Walter looked at me.
“You thinking he’s still involved?”
“I’m thinking we don’t know.”
Eleanor’s phone rang.
The investigator.
She put it on speaker.
“We’ve spoken with Mr. Brennan again.”
“What did he say?”
“He denies owning the cellular accounts.”
“Could his identity have been used?”
“Yes.”
“By Richard?”
“Possibly.”
The investigator continued.
“But there’s another issue.”
Nobody moved.
“What?”
“Mr. Brennan told us the copied database had eighty-three companies.”
“Yes.”
“The recovered Phase Two drive references ninety-four.”
Eleven companies missing from Tyler’s database.
“Why?” I asked.
“We asked him.”
“And?”
“He says he never saw those records.”
Naomi searched the Phase Two index.
Eleven entries were categorized separately.
Not manufacturing prospects.
Not Northstar customers.
They were labeled LEVERAGE.
I read the first names.
A bank.
An insurance company.
A logistics provider.
A certification laboratory.
A software vendor.
Not factories.
Organizations that manufacturers depended on.
The scheme had expanded beyond sabotaging machines.
If you could disrupt certification, financing, insurance, software access, or logistics at the right moment, you didn’t need to touch a machine at all.
Walter read the list.
“They were building ways to squeeze companies from every side.”
“Yes.”
Eleanor looked at the final entry.
Her face changed.
I followed her gaze.
Grant Industrial Group.
Category:
LEVERAGE.
Method:
KEY PERSON.
Target:
E. GRANT.
I felt the room tighten.
Then I saw the timestamp.
The record had been updated less than an hour earlier.
While we were sitting in this room.
Whoever was maintaining Phase Two was still active.
And they knew Eleanor had become the one person capable of stopping the consolidation plan.
