Thomas and I began with the desk computer.<\/p>\n
Robert's password notebook remained in the top drawer, exactly where I remembered.<\/p>\n
That fact embarrassed me now.<\/p>\n
For years, the little black book had seemed harmless because only family came into the study.<\/p>\n
Family.<\/p>\n
The word had become its own security flaw.<\/p>\n
Thomas did not touch the keyboard.<\/p>\n
\u201cWe should have someone document this properly.\u201d<\/p>\n
\u201cYou think evidence might be on here.\u201d<\/p>\n
\u201cI think if Brandon accessed protected information without authorization, we do not want to accidentally destroy a record.\u201d<\/p>\n
He contacted a digital-forensics specialist named Aaron Patel.<\/p>\n
Aaron arrived that afternoon carrying two cases and the patient expression of someone accustomed to frightened people handing him complicated machines.<\/p>\n
He asked me what I knew.<\/p>\n
I told him Brandon had used the computer after Robert's death.<\/p>\n
\u201cHow long?\u201d<\/p>\n
\u201cSeveral hours.\u201d<\/p>\n
\u201cDid he know passwords?\u201d<\/p>\n
\u201cYes.\u201d<\/p>\n
\u201cDid you revoke them?\u201d<\/p>\n
\u201cNo.\u201d<\/p>\n
\u201cDid you change your own passwords afterward?\u201d<\/p>\n
\u201cSome. Not all.\u201d<\/p>\n
He nodded without judgment.<\/p>\n
That was almost worse.<\/p>\n
Aaron created copies of the computer's data and began reviewing browser histories, saved credentials, email settings, cloud accounts, and authentication records.<\/p>\n
The work was slow.<\/p>\n
While he examined the machine, Thomas and I searched paper files.<\/p>\n
We found an old insurance portal login.<\/p>\n
A hospital billing account.<\/p>\n
A pharmacy service.<\/p>\n
Then an online patient portal Robert had created for both of us years earlier when we used the same medical network.<\/p>\n
\u201cMy account was separate,\u201d I said.<\/p>\n
Aaron looked over.<\/p>\n
\u201cSeparate login?\u201d<\/p>\n
\u201cI think so.\u201d<\/p>\n
\u201cShared recovery email?\u201d<\/p>\n
I didn't know.<\/p>\n
He checked.<\/p>\n
Yes.<\/p>\n
The recovery email had originally been Robert's.<\/p>\n
After Robert died, that address remained active.<\/p>\n
Forwarding rules had been added.<\/p>\n
\u201cWhere do messages go?\u201d Thomas asked.<\/p>\n
Aaron traced the settings.<\/p>\n
\u201cTo another address.\u201d<\/p>\n
He read it aloud.<\/p>\n
I knew it.<\/p>\n
Brandon's.<\/p>\n
The room went silent.<\/p>\n
\u201cWhen was forwarding added?\u201d I asked.<\/p>\n
Aaron inspected the data.<\/p>\n
\u201cLooks like about sixteen months ago.\u201d<\/p>\n
Two months after Robert died.<\/p>\n
Around the time Brandon had helped me with the accounts.<\/p>\n
\u201cDoes that mean he could read my medical information?\u201d<\/p>\n
\u201cDepends on what notifications were sent and whether he could reset credentials.\u201d<\/p>\n
Aaron continued.<\/p>\n
The answer became worse.<\/p>\n
Password-reset messages from my patient portal had gone to Robert's old address.<\/p>\n
Because the forwarding rule remained active, copies went to Brandon.<\/p>\n
Someone had reset the password three times.<\/p>\n
I had assumed I was forgetting it.<\/p>\n
I remembered sitting at this desk in April, irritated because my usual password stopped working.<\/p>\n
Again in July.<\/p>\n
Then in October.<\/p>\n
\u201cCan you tell who reset it?\u201d<\/p>\n
\u201cPossibly.\u201d<\/p>\n
Aaron reviewed login records.<\/p>\n
Most connections came from my home.<\/p>\n
Others came from an address associated with Brandon's city.<\/p>\n
\u201cHow certain?\u201d<\/p>\n
\u201cIP records don't identify a person by themselves. But the pattern is concerning.\u201d<\/p>\n
Thomas asked for a full report.<\/p>\n
Aaron nodded.<\/p>\n
I stared at the screen.<\/p>\n
My medical portal contained appointment summaries.<\/p>\n
Test results.<\/p>\n
Prescriptions.<\/p>\n
After-visit instructions.<\/p>\n
And the hospital admission.<\/p>\n
\u201cHow soon after I collapsed could he have known?\u201d<\/p>\n
Aaron examined timestamps.<\/p>\n
He looked uncomfortable.<\/p>\n
\u201cWhat?\u201d<\/p>\n
\u201cThe portal shows an outside login while you were hospitalized.\u201d<\/p>\n
My hands went cold.<\/p>\n
\u201cWhen?\u201d<\/p>\n
\u201cThe first night.\u201d<\/p>\n
The first night.<\/p>\n
While Margaret sat beside my bed, Brandon\u2014or someone using access linked to his location\u2014had opened my medical account.<\/p>\n
\u201cHe knew.\u201d<\/p>\n
Thomas did not respond.<\/p>\n
\u201cHe knew that night.\u201d<\/p>\n
Another login occurred the following morning.<\/p>\n
Then a third after discharge.<\/p>\n
Not one call.<\/p>\n
Not one message.<\/p>\n
Not one question.<\/p>\n
I had spent weeks telling myself my children failed to notice because I had stopped initiating contact.<\/p>\n
But Brandon had known almost immediately.<\/p>\n
Worse, he had not merely known.<\/p>\n
He had searched.<\/p>\n
Aaron clicked through the access history.<\/p>\n
Specific documents had been opened.<\/p>\n
My discharge summary.<\/p>\n
Cardiology notes.<\/p>\n
Medication list.<\/p>\n
A nursing note describing temporary confusion after the collapse.<\/p>\n
That sentence later appeared, transformed, in paperwork suggesting cognitive decline.<\/p>\n
I stood up.<\/p>\n
Thomas said my name.<\/p>\n
\u201cI need air.\u201d<\/p>\n
I walked onto the patio.<\/p>\n
Cold struck my face.<\/p>\n
For several minutes I stared at the empty garden.<\/p>\n
The hospital had frightened me.<\/p>\n
I had awakened beneath fluorescent lights with wires attached to my chest, unable at first to remember how long I had been unconscious.<\/p>\n
If Brandon had called that night, I would have forgiven almost anything before it happened.<\/p>\n
That was the terrible simplicity of it.<\/p>\n
He could have called.<\/p>\n
He chose information instead.<\/p>\n
When I returned inside, Aaron had found another trail.<\/p>\n
Someone had downloaded portions of my records.<\/p>\n
Files were later attached to an email draft inside Robert's old account.<\/p>\n
The draft had been deleted, but remnants remained.<\/p>\n
Recipient information pointed toward Brandon.<\/p>\n
\u201cCan we recover the attachment?\u201d<\/p>\n
\u201cPossibly.\u201d<\/p>\n
By evening, Aaron reconstructed part of it.<\/p>\n
My discharge summary.<\/p>\n
The document Brandon needed to transform one medical incident into a narrative of incapacity.<\/p>\n
Thomas removed his glasses.<\/p>\n
\u201cThis needs to go to counsel experienced in health privacy and computer access.\u201d<\/p>\n
\u201cDo it.\u201d<\/p>\n
Aaron glanced at me.<\/p>\n
\u201cThere is something else.\u201d<\/p>\n
Of course there was.<\/p>\n
\u201cWhat?\u201d<\/p>\n
\u201cThe forwarding rule wasn't the only change.\u201d<\/p>\n
A secondary recovery number had been added to Robert's email account.<\/p>\n
The final four digits matched Brandon's phone.<\/p>\n
That meant he could keep control of the account even if a password changed.<\/p>\n
\u201cCan he still access it?\u201d<\/p>\n
\u201cNot anymore.\u201d<\/p>\n
Aaron removed the recovery method and secured every linked account.<\/p>\n
For the first time in sixteen months, the digital doors closed.<\/p>\n
I changed passwords until my fingers hurt.<\/p>\n
Medical portals.<\/p>\n
Banking.<\/p>\n
Email.<\/p>\n
Utilities.<\/p>\n
Insurance.<\/p>\n
Cloud storage.<\/p>\n
Anything connected to anything else.<\/p>\n
Then I enabled additional security on all of them.<\/p>\n
At nearly nine that night, Aaron packed his equipment.<\/p>\n
Before leaving, he handed Thomas an encrypted drive.<\/p>\n
\u201cThis has the initial preservation copy.\u201d<\/p>\n
Thomas signed a receipt.<\/p>\n
The formality of it struck me.<\/p>\n
My family had become a matter requiring chain of custody.<\/p>\n
After everyone left, I received a message from Chloe.<\/p>\n
Are you okay?<\/p>\n
A normal question.<\/p>\n
Two months earlier it would have meant little.<\/p>\n
Now it mattered.<\/p>\n
I answered.<\/p>\n
No. But I will be.<\/p>\n
She replied:<\/p>\n
Can I help?<\/p>\n
I considered telling her no.<\/p>\n
Then I remembered what I had told her.<\/p>\n
Stop apologizing and do something useful.<\/p>\n
Find out who knew about the hospital.<\/p>\n
Now I knew.<\/p>\n
I typed:<\/p>\n
Did Brandon ever tell you how he learned I was hospitalized?<\/p>\n
Her response took several minutes.<\/p>\n
He said David knew.<\/p>\n
That interested me.<\/p>\n
Did David say that himself?<\/p>\n
No.<\/p>\n
So Brandon had provided information while allowing everyone to assume it came from David.<\/p>\n
I called Chloe.<\/p>\n
She answered quietly.<\/p>\n
\u201cMom?\u201d<\/p>\n
\u201cDid Brandon ever mention having access to Dad's email?\u201d<\/p>\n
\u201cNo.\u201d<\/p>\n
\u201cThink.\u201d<\/p>\n
She was silent.<\/p>\n
Then she said, \u201cMaybe.\u201d<\/p>\n
\u201cWhat does maybe mean?\u201d<\/p>\n
\u201cLast summer Jessica lost an old insurance document. Brandon said he'd check Dad's email because Dad kept everything.\u201d<\/p>\n
My grip tightened.<\/p>\n
\u201cHow could he check it?\u201d<\/p>\n
\u201cI didn't ask.\u201d<\/p>\n
\u201cDid he do it?\u201d<\/p>\n
\u201cYes. He found the policy.\u201d<\/p>\n
That placed him inside Robert's account months before my collapse.<\/p>\n
\u201cAnything else?\u201d<\/p>\n
Chloe thought.<\/p>\n
\u201cHe once told me you changed doctors.\u201d<\/p>\n
I froze.<\/p>\n
\u201cWhen?\u201d<\/p>\n
\u201cSpring.\u201d<\/p>\n
\u201cHow did he know?\u201d<\/p>\n
\u201cI assumed you told him.\u201d<\/p>\n
\u201cI didn't.\u201d<\/p>\n
Each memory now carried a different meaning.<\/p>\n
\u201cHow often did he talk about me when I wasn't calling?\u201d<\/p>\n
Chloe became quiet.<\/p>\n
\u201cSometimes.\u201d<\/p>\n
\u201cWhat did he know?\u201d<\/p>\n
\u201cThat you had a cardiology appointment. That you changed one medication. That you donated to some foundation.\u201d<\/p>\n
The donation.<\/p>\n
My banking information?<\/p>\n
Or merely a receipt in email?<\/p>\n
\u201cHow did you not find that strange?\u201d<\/p>\n
\u201cI thought you were still talking to him privately.\u201d<\/p>\n
There it was again.<\/p>\n
All three children had assumed somebody else was communicating with me.<\/p>\n
Because I had always done the work of keeping everyone connected, they apparently never noticed when there was no actual conversation underneath the information.<\/p>\n
\u201cDid Jessica know he had this access?\u201d<\/p>\n
\u201cI don't know.\u201d<\/p>\n
\u201cAsk carefully. Do not alert him.\u201d<\/p>\n
Chloe hesitated.<\/p>\n
\u201cOkay.\u201d<\/p>\n
After we hung up, I went into Robert's study.<\/p>\n
The room no longer felt like his sanctuary.<\/p>\n
It felt compromised.<\/p>\n
I took the black password book from the drawer and placed it on the desk.<\/p>\n
Robert had trusted paper.<\/p>\n
Brandon had used the trust surrounding that paper.<\/p>\n
I opened the final pages.<\/p>\n
Several notes appeared in Robert's handwriting.<\/p>\n
One caught my eye.<\/p>\n
B \u2014 remove access after audit.<\/p>\n
The date was two weeks before Robert died.<\/p>\n
B.<\/p>\n
Brandon.<\/p>\n
I called Thomas immediately.<\/p>\n
He answered on the second ring.<\/p>\n
\u201cI found another note.\u201d<\/p>\n
I read it.<\/p>\n
Thomas was silent.<\/p>\n
\u201cRobert knew.\u201d<\/p>\n
\u201cHe knew something.\u201d<\/p>\n
\u201cWhat audit?\u201d<\/p>\n
\u201cWe need to find out.\u201d<\/p>\n
The following morning, David supplied the files Thomas demanded.<\/p>\n
Buried among them was an accounting memorandum dated eleven days before Robert's heart attack.<\/p>\n
The subject line was simple.<\/p>\n
Unauthorized access review.<\/p>\n
Robert had discovered repeated logins to investment records.<\/p>\n
He suspected Brandon.<\/p>\n
But the report showed something stranger.<\/p>\n
Two different access patterns existed.<\/p>\n
One appeared tied to Brandon.<\/p>\n
The second came from an account associated with Jessica.<\/p>\n
My children had not started monitoring our finances after Robert died.<\/p>\n
They had been doing it while he was alive.<\/p>\n
At the bottom of the memorandum, Robert had handwritten:<\/p>\n
Do not confront together. They cover for each other.<\/p>\n
I read that sentence several times.<\/p>\n
Then Thomas turned the page.<\/p>\n
Attached was a note from Robert documenting a conversation with Chloe.<\/p>\n
My youngest daughter had apparently come to him privately.<\/p>\n
She warned him that Brandon and Jessica were discussing my inheritance years before anyone told me I called too much.<\/p>\n
And according to Robert's note, Chloe had begged him not to tell them she was the one who warned him.<\/p>\n
Thomas and I began with the desk computer. Robert's password notebook remained in the top drawer, exactly where I remembered. That fact embarrassed me now. For years, the little black … <\/p>\n","protected":false},"author":1,"featured_media":27567,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-27577","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-insightdrama"],"_links":{"self":[{"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/posts\/27577","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/insightdrama.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=27577"}],"version-history":[{"count":1,"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/posts\/27577\/revisions"}],"predecessor-version":[{"id":27612,"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/posts\/27577\/revisions\/27612"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/insightdrama.com\/index.php?rest_route=\/wp\/v2\/media\/27567"}],"wp:attachment":[{"href":"https:\/\/insightdrama.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=27577"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/insightdrama.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=27577"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/insightdrama.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=27577"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}