Tiffany had no hospital title, yet Mark’s relationship gave her a shadow office more powerful than formal departments.
Katherine ordered Maria’s warning removed and requested every disciplinary action connected to Tiffany’s vendors. They found nine. Technicians and nurses who questioned equipment had been labeled difficult, reassigned, or placed on probation.
Henry asked to address the board. His valet uniform looked out of place among tailored suits, which was precisely why Katherine invited him to the table.
He carried parking logs bound with rubber bands.
“The digital system changed entries,” he said. “So I kept paper.”
Mark frowned.
“That violates data policy.”
“It preserved the data you violated,” Katherine replied.
Henry’s handwritten times showed Mark entering the garage on nights he claimed to be at medical conferences. Tiffany’s trucks arrived minutes later. One date matched the transfer of genuine cardiac monitors to a private airfield.
The board secretary asked why Henry had not reported sooner.
“I reported to Mr. Thompson,” he said. “The next week, my hours were cut.”
Mark looked away.
The vote to suspend him became unanimous.
Afterward, Katherine went to the laundry department with the stained suit. A tailor named Mrs. Alvarez examined the coffee.
“I can improve it,” she said. “I cannot promise invisible.”
“Do not make it invisible.”
Katherine left the jacket there and changed into blue surgical scrubs from emergency supplies. For the next sixteen hours, she moved through the hospital with the device review teams. She was not a clinician and touched no patient equipment, but she carried lists, called suppliers, and listened.
On the pediatric floor, a father asked whether his daughter had been unsafe.
Katherine did not offer false reassurance.
“A suspect monitor entered this unit. It was removed before use on your daughter. We are checking every system and will show you the results.”
“How did this happen?”
“Leadership failed to verify what it purchased.”
She used the word leadership, not one villain’s name. Mark and Tiffany had committed the fraud, but departments accepted their pressure, invoices bypassed review, and employees feared retaliation. Repair required more than removing two people.
At dawn, the review confirmed twenty-seven counterfeit or obsolete devices. None remained in service. Five genuine machines were recovered from a warehouse before export.
One monitor was missing.
The serial number appeared in a private clinic across the river. Agents arrived to find the clinic empty and the device gone. Its owner was Mark’s former business-school roommate.
Mark denied knowledge. Tiffany, speaking through her attorney, said he arranged every resale.
Katherine studied shipment photographs. In one reflection, the polished elevator door showed a person wearing a hot-pink sleeve—but also Mark’s distinctive silver watch.
Both had attended.
The missing monitor’s network chip pinged when someone powered it on inside a storage facility. Federal agents recovered it along with patient records copied from Apex.
The scheme had a second revenue stream. Mark and Tiffany were selling anonymized medical data, except the files had not been anonymized. Names, diagnoses, and insurance numbers remained visible.
They had sold the machines that watched patients’ hearts and the secrets recorded while those hearts were vulnerable.
Katherine felt nausea rise. The equipment theft threatened bodies; the data theft threatened lives in slower ways—insurance fraud, extortion, discrimination.
The chief legal counsel expanded notifications and credit protection for every affected patient. Katherine insisted notices use plain language rather than phrases designed to minimize responsibility.
Mark called from his attorney’s office.
“The data operation was Tiffany’s. If you support a limited settlement, I can help recover it.”
“You signed the vendor approvals.”
“Because she threatened to expose us.”
“The affair?”
“Everything.”
He claimed Tiffany initially approached him with evidence of procurement waste. Their relationship began during private meetings. Once she obtained compromising messages, she demanded contracts.
“So you stole to hide that you were unfaithful.”
“I made one mistake and then tried to contain it.”
“A mistake does not need shell companies, freight manifests, and stolen patient files.”
He began to say he loved her. Katherine ended the call.
Investigators later confirmed Tiffany did blackmail him at first. But months after he could have reported her, he negotiated a larger share and recruited his roommate. Victimhood had become partnership as soon as profit appeared.
The public hospital forum was held in the glass atrium where Tiffany spilled coffee. Hundreds attended. Katherine stood at the same spot without a stage.
Maria asked the first question.
“How will staff know powerful people cannot erase complaints again?”
“You should not have to know it by trusting me,” Katherine said. “You should know it because complaints go to an office I cannot privately overrule, and because outcomes are reported.”
She announced an independent safety ombudsman selected jointly by clinical staff and patient representatives.
Henry spoke next.
“Will contract workers be protected too?”
“Yes. Power notices payroll categories only when it wants someone easier to threaten.”
Applause rose, but Katherine raised a hand.
“Do not applaud policies before they work.”
