She might have been concerned about innocent employees.
Or she might have been attempting to understand how much investigators knew.
There was no reliable way to determine which explanation was correct from that conversation alone.
Two days later, Elena's team obtained additional system records through the appropriate legal process.
The records showed that the restricted account had been used on several dates corresponding to missing or disputed evidence transfers.
However, the account's access logs did not identify the individual who had physically operated the system.
Investigators would need additional evidence before attributing those actions to any particular person.
They also discovered that a separate administrative credential had been used to approve the account's creation.
That credential belonged to an office responsible for technical authorization.
Evelyn Shaw had held that role during the relevant period, but other staff members could have used the credential under certain circumstances.
The distinction mattered.
A name in a system log was a lead, not a verdict.
Elena ordered a review of the credential records and requested interviews with every employee who had access.
Meanwhile, the county's chief administrative officer announced that Evelyn would temporarily step away from technical approvals while the review continued.
The decision was described as a precaution, not a finding of misconduct.
Evelyn issued a statement saying she welcomed the investigation and would cooperate fully.
Then, late Friday evening, Elena received a phone call from Daniel Price.
His voice was strained.
"I remembered something," he said.
"What is it?"
"The second account had a recovery address."
"Can you identify it?"
"I don't know if it still exists. But I remember the domain."
"Tell me."
Price gave her the name of a private technology contractor that had once maintained the county's records systems.
Elena searched the company's historical contracts.
The contractor had been paid through a subsidiary of Mercer Holdings LLC.
The same company listed as the owner of the warehouse on Mercer Street.
For the first time, the anonymous note, the missing evidence, the restricted account, and the warehouse appeared to share a possible connection.
It was still circumstantial.
It was still incomplete.
But it was no longer a collection of unrelated questions.
It was a trail.
And someone had apparently gone to considerable effort to keep that trail from being followed.
The warehouse at 419 Mercer Street stood on the industrial edge of Ashford, surrounded by abandoned loading docks and overgrown grass.
For years, residents had assumed it was used for storing construction equipment.
Its windows were covered with dark film, and its entrance was protected by a metal gate.
According to public property records, the building belonged to Mercer Holdings LLC.
Investigators later established that the company had contracted with several local businesses, including a technology firm that had previously provided services to Blackstone County.
The existence of those contracts was not illegal.
What mattered was whether the warehouse had been used to store records or equipment connected to the missing evidence.
After obtaining the necessary authorization, investigators arranged a search.
Elena Ramirez did not attend the operation herself. She remained at the prosecutor's office, coordinating the legal documentation and ensuring that the search stayed within its authorized scope.
A team of independent investigators arrived shortly after 6:00 a.m.
They found ordinary office equipment, boxed computer components, shelving, and a small server room.
At first, nothing appeared unusual.
Then an investigator discovered a locked cabinet in the rear office.
Inside were several old storage devices, printed maintenance schedules, and a notebook containing handwritten reference numbers.
One of the numbers matched B-17.
The investigators photographed the materials and documented their location.
They did not immediately remove every item from the building. Each object had to be assessed for relevance, and the chain of custody had to be preserved.
At 7:23 a.m., the lead investigator contacted Elena.
"We found a match."
"To what?"
"The B-17 designation. It's written in a maintenance notebook."
"Does the notebook identify what the designation means?"
"Not yet. We're still examining it."
"Any sign of active equipment?"
"One server appears to have been disconnected recently. We can't determine how recently without further analysis."
Elena instructed the team to document the equipment and consult the forensic specialist before taking any further action.
Then the call ended.
For the next forty minutes, investigators worked through the office.
At 8:11 a.m., the electricity went out.
The lights flickered once, then disappeared.
The backup lighting activated a few seconds later.
An investigator near the entrance looked toward the street.
A utility truck was parked across the road.
Its markings did not match the local power company's vehicles.
Before anyone could approach it, the truck pulled away.
The investigators did not chase it.
They secured the building, documented the interruption, and contacted the relevant authorities to determine whether a legitimate utility crew had been working in the area.
The power failure could have been accidental.
It could have been unrelated maintenance.
Or someone might have wanted to interrupt the search.
Nobody had enough evidence to say.
But the timing was suspicious enough to be documented.
At the prosecutor's office, Elena received the update and immediately requested an examination of the building's electrical records and any available external camera footage.
She also asked investigators to determine whether the server had been connected to an external network before the power interruption.
That afternoon, the forensic team found a handwritten label beneath the server cabinet.
It read:
ARCHIVE B — FINAL TRANSFER: 06/14.
The date corresponded to a week when several items from the Bellamy investigation had disappeared from the official records system.
The team found no intact database on the first device they examined, but a second storage unit contained fragments of old directory structures.
Those fragments included filenames resembling evidence inventory entries.