Chapter 77 - Meredith Grace Received the Call at 2:11 A.M.
Three months after the ceremony, the phone rang at 2:11 a.m.
Our family had learned not to trust calls before sunrise.
Meredith Grace answered from her apartment.
Phoenix’s cybersecurity director sounded panicked.
“Someone is inside the system.”
“Define inside.”
“Administrative root access.”
“Shut external connections.”
“We did.”
“Backup network?”
“Compromised.”
She was dressed before he finished speaking.
By 2:30, Phoenix headquarters operated manually.
No outgoing payments.
No internal messaging.
No remote access.
This time, nobody waited for disaster.
That was progress.
The attack was sophisticated.
Not Holloway.
He was in federal prison.
Voss too.
Different technique.
Different signatures.
For several hours everyone feared another enemy.
Then the cybersecurity team found something strange.
No data was stolen.
No money moved.
The intruder changed only one thing.
Beneficiary files.
Thousands of names.
Addresses.
Housing records.
Medical grants.
Youth legal services.
Personal information had been copied.
That was worse.
Phoenix protected vulnerable people.
Children.
Domestic violence survivors.
Families in relocation programs.
The threat arrived at dawn.
Pay twenty-five million dollars in cryptocurrency or we release every beneficiary record.
Ransomware.
Ordinary crime.
Almost refreshing.
Except ordinary crime could destroy lives just as efficiently as dynastic corruption.
Meredith Grace called federal cyber investigators.
Then public disclosure counsel.
Then me.
“Why me?”
“I’m scared.”
Not strategy.
Family.
Different.
I sat beside Julian’s sleeping form and listened.
“What are you going to do?”
“Not pay.”
“Good.”
“But if they publish—”
“People get hurt.”
“Yes.”
“Then prepare them.”
She was silent.
“Before the criminals control the clock.”
At six, Phoenix notified affected organizations confidentially.
By eight, high-risk families received direct support.
Safe addresses were changed.
Restraining-order victims relocated where needed.
Passwords reset.
Youth identities flagged for fraud protection.
Then Phoenix went public.
No denial.
No delay.
Meredith Grace stood before cameras.
“At approximately 1:48 this morning, an unauthorized actor accessed a beneficiary database.”
Reporters shouted.
“How many?”
“Potentially 182,000.”
Gasps.
“Did they steal financial data?”
“Some.”
“Will you pay ransom?”
“No.”
“Why?”
“Because paying criminals does not guarantee deletion and encourages future attacks.”
“What are you doing?”
She listed actions.
Real actions.
Not public relations.
The ransom group released a sample anyway.
Twenty records.
One belonged to a sixteen-year-old girl in witness relocation after domestic violence.
My stomach turned.
Federal agents moved faster.
Blockchain tracing.
Server seizures.
International cooperation.
The criminals expected Phoenix to behave like a reputation-obsessed institution.
Hide breach.
Delay notice.
Negotiate privately.
Instead, transparency eliminated leverage.
Not harm.
Leverage.
Within four days, investigators identified the group.
Not masterminds.
Three men in Eastern Europe and two U.S. affiliates.
Money.
No family revenge.
No fifty-year conspiracy.
Just greed.
Meredith Grace looked strangely relieved.
“I almost missed regular criminals,” she said.
“Don't say that.”
“Too late.”
The breach still damaged Phoenix.
Trust suffered.
Board hearings followed.
Cybersecurity chief resigned.
Meredith Grace refused his resignation.
“Why?” I asked.
“He reported immediately.”
“So?”
“People should not learn that telling the truth quickly gets them fired.”
Good.
Instead, systems changed.
Network segmentation.
Independent red teams.
Minimal-data retention.
Beneficiary information decentralized.
Phoenix spent fifty million dollars fixing architecture.
“Expensive lesson,” Julian said.
“Cheaper than arrogance.”
He nodded.
Then something unexpected happened.
Other nonprofits requested Phoenix’s breach protocol.
Hospitals.
Schools.
Public agencies.
Meredith Grace published it freely.
No licensing.
No branding.
The worst night of her professional year became a national model for transparent cyber response.
Again, not because pain was a gift.
Because response was a choice.
A month later, the FBI announced the U.S. affiliates had been arrested.
The stolen database never appeared publicly beyond the initial sample.
Most high-risk families remained safe.
Not perfect.
Enough.
I told Meredith Grace I was proud.
She smiled.
“Because we stopped them?”
“No.”
“Then?”
“Because you told the truth before you knew whether it would make you look competent.”
She thought about that.
Then nodded.
May you like
Leadership was becoming boring again.
Exactly as it should.
