Nine if you count the time he said it while adjusting his belt. That was the number of times Derek had smiled at me in three years, and every one of those smiles had been the same: tight, polite, and sharp enough to cut glass. I’d spent a decade in this company, climbed from night-shift data entry to the strategic operations desk, and I’d earned every mug and laminated badge on my shelf. But in the new org chart, my name didn’t appear.
Not under leadership, not under operations, not anywhere. Just a gray box labeled “Legacy System” in a corner of the slide that nobody bothered to annotate. Then came the memo. Cost centers, incentive alignment, optimization of value streams.
Translation: the C-suite handed themselves bonuses based on “strategic value” instead of profit, and Derek became the new merger readiness lead. My merger readiness lead. The title I’d spent two years building, the one I’d staked my reputation on, vanished overnight. No transition plan, no handover meeting, just a cheerful email from HR reminding everyone to welcome Derek warmly.
I didn’t scream. I didn’t throw a mug. I updated my exit clause spreadsheet, made sure my non-compete was still readable, and watched the plane head toward the mountain. Because somewhere in my desk, still logged in, still ticking, was the old reporting system.
The one they’d called “deprecated” but never bothered to switch off. A week before the Centicore due diligence, Derek called me into his office. He leaned back in my old chair, the one with the lumbar support I’d requested after my second back surgery, and smiled. Smile number ten, if you were counting.
He said they needed “operational continuity” and asked, so sweetly, if I’d help with the merger numbers. I told him my plate was full. He told me my plate didn’t matter anymore. So I kept my head down.
I updated my own spreadsheets. I asked no questions. But I also kept my access to the card logs, the vendor accounts, the travel reimbursement system, all of it. Not because I was loyal.
Because I was curious. Day one of due diligence, Derek held a town hall. Day two, the dashboard glitched. I noticed it from my cubicle, a flicker in the real-time expense totals, then it stabilized.
Derek’s data pull didn’t match the vendor receipts. Not by a little. Five figures. I checked once, then again, then I went back to my own work.
Still wouldn’t have said anything, except Derek started bragging about his “eagle eye for anomalies” in the all-hands email. That’s when I started making copies. Not screenshots. Real copies.
Printouts, PDFs, the raw CSV exports hidden in the old system. I kept them in a folder labeled “Recipes” and put it in the bottom drawer of my filing cabinet. The first red flag was a pattern. Small, innocuous, easy to miss if you weren’t looking.
A $380 lunch at a steakhouse. A $350 dinner at a seafood place. Two weeks later, the same amounts, same restaurants, but under different names. All under the $10,000 threshold, all coded with the green light project codes we used for fast-track approval.
I pulled the card logs and cross-referenced them against the attendance sheets. Only two people checked into the office that weekend according to the badge reader: Derek and Travis from Finance. The receipts, though, showed a team lunch for six. Then I found the hotel stays.
No check-in logs, no room numbers, just charge slips attached to approved expenses. A two-night stay in a resort suite during a week when Derek’s calendar showed a “strategic offsite” in the same city. The vendor name matched. The dates matched.
The only thing missing was a body. I could have gone to HR. I could have gone to the audit committee. But I’d seen what happened to people who spoke up.
They got invited to meetings where their expertise was politely discussed, then erased from the project folder. Instead, I waited. I kept collecting. And when the five-figure discrepancies started appearing in the quarter-end summaries, I made sure the source exports were still intact.
The merger was set to close in six weeks. Centicore was sending a compliance team to review our books. Derek was glowing, promising a “seamless integration. ” Everyone believed him.
Almost everyone. Late one Tuesday, the email came. Subject: “sync w/ Susan. ” No greeting, no context, just that.
I knew what it meant. Derek wanted me in the war room, wanted me to look at the numbers he’d been massaging, wanted me to sign off on a truth I’d been watching rot for months. I walked into the conference room and found Derek at the head of the table, Travis beside him, and a row of unfamiliar faces from Centicore. Derek smiled.
Smile eleven. He introduced me as “our legacy system expert” and asked if I could pull a few reports for the visitors. I smiled back. The same tight, polite smile I’d been wearing for ten years.
“Sure,” I said. “Which reports would you like? ”
He handed me a list. Simple stuff, expense summaries, travel logs, vendor balances.
I could have pulled them from the dashboard in minutes. Instead, I nodded, walked back to my desk, and opened the folder labeled “Recipes. ”
I pulled out the cross-reference matrix, the one I’d built in the old system, the one with every employee name, every meal date, every vendor receipt, and every card activity. I printed out a stack of pages, put them in a manila folder, and walked back to the conference room.
The Centicore team was still waiting. Derek was tapping his pen. Travis was sweating. I set the folder on the table and opened it to the first page.
“Here’s the expense summary by department,” I said, pointing to a column. “And here’s the source data, line by line. ”
They started flipping. Derek’s face went through a sequence I’d never seen before: confusion, then recognition, then a pale kind of dread.
Travis reached for a page, then stopped mid-air, as if the paper might burn him. “Travis,” I said, calm, measured, “Do you know if there’s any backup data? ”
The room went quiet. Someone in the back started flipping through pages faster, then slower.
The Centicore lead looked up at me, then at Derek, then back at the numbers. “Derek,” I said, “should I clarify the timeline for the hotel charges, or would you prefer to take it from here? ”
He didn’t answer. He just stared at the page where his own name appeared next to a resort total no one could justify.
I read the next line aloud: twelve separate invoices, all from the same restaurant, all under different employee IDs, all routed through the same PO box. The Centicore lead frowned and said: “Those aren’t our vendors. ”
“They weren’t supposed to be,” I said. Derek started fidgeting.
He must have thought I’d only pull a summary, that I’d trust the dashboard like everyone else. He didn’t know I’d kept the old export files, the ones they’d abandoned, the ones storing every raw line of data. “Would the reimbursement tags mean anything to you? ” I asked, holding up a page with a string of G7 codes.
“Do you recall what code G7 means in the reimbursement tags? ”
Silence. Then Derek said, “That’s not what you think. ” He said it too quickly, too loud.
“Then tell me what I’m looking at,” I said. “Because this says you charged a team lunch for four on a day the attendance log says only two people were in the building. This says you approved a hotel stay for five nights during a week your calendar marked as three days of onsite workshops. And this invoice here?
It’s from a restaurant that doesn’t exist. It’s just a name and a PO box. ”
He started talking about ethical boundaries, about the difference between aggressive accounting and fraud. As if intent was the line between sloppy bookkeeping and indictable misrepresentation.
I let him talk. Then I said: “Check the lunch receipts. ”
The sentence slipped out softly, like a stone dropped into still water. “Check the lunch receipts,” I repeated.
“Especially any submitter tagged with a green light project code. ”
Because I’d already done that. Every single one, under every name, traced back to the same card, the same login, the same fistful of company cash being funneled into nothing. Derek reached for his laptop, then stopped.
He looked at Travis. Travis looked at the window, like he was calculating the drop. The Centicore team was already whispering. One of them typed something into a phone, fast.
Another pulled out a printed summary and started circling numbers with a red pen I could see from across the table. Derek cleared his throat. “We’ll circle back internally,” he said. “This is a minor procedural issue.
”
“It’s a compliance issue,” I said. “And it’s not internal. It’s on their desk now. ”
I watched him process that.
Watched the color drain out of his face like water leaving a cup. Then he pushed back his chair, walked to the window, and stood there for a long moment, hands clasped behind his back, not moving. When he turned, he was wearing a mask of composure, the one I’d seen him practice in the mirror of his own ego, and he said, “We’ll need to discuss this in a smaller group. ”
“We will,” I said.
“But not here. Not with the compliance team out in the hall. ”
He tried to buy time. “Let me take you to lunch,” he said, smiling his number twelve.
“Palate cleanser. ”
I laughed. A short, brittle laugh. “Lunch won’t fix this,” I said.
“Fifteen years of expense logs won’t fix this. You should have thought about the lifetime of a paper trail before you started printing your own reality. ”
Then I packed up my folder, stood, and walked toward the door. At the threshold, I turned back.
The Centicore lead was already on his phone, probably calling the same number that had vetted this merger before they’d ever walked into the building. Derek was still frozen at the window, napkin in his hand, staring at the number I’d written down, the one that matched the vendor invoice to the cent. “I’ll send the full export,” I said. “Every line item, every timestamp, every login.
You might want to cancel the press release. ”
And then I left. I didn’t wait for an answer. I didn’t need one.
Back at my desk, I slid the folder into my bag, closed my old laptop for the last time, and unplugged it. No one stopped me. No one asked where I was going. They were all in the conference room, trying to figure out whose names were on the receipts.
I walked out of the building with the afternoon sun in my eyes and the weight of fifteen years in my shoulders. I didn’t look back. Not because I didn’t want to. Because I already knew what would be there: Derek, scrambling to clean up a mess he thought would never see the light of day, and the wreckage of a merger built on invented numbers and borrowed time.
Somewhere in my bag, the folder still held the truth. And eventually, the world would catch up to it.
