By the following morning, the investigation had expanded beyond the courthouse and the municipal police department.
Deputy Director Hayes coordinated the evidence review, while Nina Patel compared the access logs, email records, and available security footage. Judge Whitmore remained informed but kept her role separate from the operational decisions, ensuring that the investigation proceeded through the appropriate channels.
The first important discovery came from Mercer's work email.
A message had been sent to his account shortly before the parking garage encounter. Although it appeared to originate from an internal police address, the technical records showed that the message had been routed through an external server before reaching the department's system.
The sender's identity remained uncertain.
However, the message contained an attachment: a photograph of the black sedan.
It was the same photograph Evelyn had received on her phone.
“Someone wanted both of us to have the same image,” Evelyn told Hayes. “The question is whether Mercer was supposed to recognize me or simply report my presence.”
“Possibly either,” Hayes replied. “We need the original message, the complete headers, and any related communications before drawing conclusions.”
Nina had already begun examining the attachment.
“The photograph was compressed before it reached both recipients,” she explained. “The two copies share distinctive image characteristics, which suggests they came from the same source file.”
“Can you identify the source device?” Evelyn asked.
“Not reliably from the available copies. Compression and transmission can remove identifying information. We may be able to establish where the image was first uploaded, but that requires additional records.”
The team then examined the renovation records connected to Victor Shaw.
Shaw was the project manager for the company that had renovated the courthouse's document storage facilities. His responsibilities included coordinating contractors, arranging maintenance access, and overseeing the replacement of outdated security equipment.
On paper, his role gave him a legitimate reason to be near the old archive corridor.
But the records contained several irregularities.
Three maintenance visits had been logged under a temporary credential that was not assigned to any named employee. Two visits occurred outside the approved work schedule. A third took place after the contractor had officially declared the relevant section complete.
Hayes reviewed the records.
“Those discrepancies justify further inquiry, but they don't establish that Shaw stole the files.”
“No,” Evelyn agreed. “We need to establish who entered the rooms and what was moved.”
Nina displayed the access logs.
“The temporary credential was used near the loading dock on the same day Paul Bennett disappeared. A separate record shows access to the archive corridor two days later.”
“Can we connect the credential to Shaw?” Hayes asked.
“Not yet. The credential was issued to the contractor's general maintenance account. We need the company's internal assignment records and any surviving camera footage.”
The team contacted the contractor through the appropriate investigative channels and requested preservation of its access records.
Meanwhile, Sergeant Lewis supplied additional information about Mercer.
The officer's account had been used to search several vehicle registrations associated with people connected to the courthouse. Some searches were legitimate, but others lacked clear documentation.
One registration belonged to a former archive employee who had provided information during the missing-files investigation.
Another belonged to a journalist who had recently requested public records concerning the renovation contract.
The pattern raised concerns, but it did not prove that Mercer had knowingly participated in surveillance.
Evelyn made a note to examine each search individually.
“An irregular pattern is a lead,” she reminded the team. “It isn't a substitute for evidence.”
Later that afternoon, Nina received a response from the contractor's records department.
A temporary maintenance credential had been assigned to Victor Shaw on the day Paul Bennett disappeared.
The assignment had been approved by Richard Cole.
Evelyn looked at Hayes.
“That connects the two men through a documented access record.”
“It connects them to the credential,” Hayes replied. “Now we need to establish what they did with it.”
The contractor's access records included a work order describing the removal of obsolete network equipment from the courthouse basement. The order listed several storage devices, but the completion report contained no serial numbers.
That omission was unusual.
When the technical team compared the work order with the courthouse inventory, they found that two devices listed as obsolete had never been received by the designated disposal facility.
Their whereabouts were unknown.
One device had been used to store archived access logs.
The other had been assigned to a document-scanning workstation.
“Those devices could contain information relevant to the missing files,” Nina said. “But we need to establish whether the devices were actually removed, whether the inventory was accurate, and whether their contents remain recoverable.”
Hayes authorized further investigation into the equipment transfer.
The next lead came from a former contractor employee who agreed to provide information.
The employee reported that Shaw had instructed workers to move several sealed boxes into a service vehicle before the renovation inspection. He said the boxes were described as obsolete records, but no disposal forms had been completed.
The employee could not identify the contents.
However, he remembered that Richard Cole had been present.
Evelyn interviewed the employee through the proper procedures and documented the account.
“Did you see either man open the boxes?” she asked.
“No.”
“Did you hear them discuss missing files?”
“Not directly. But I heard Shaw say that the originals had to disappear before the audit.”
“Are you certain those were his exact words?”
“Not entirely. It was something close to that.”
Evelyn recorded the qualification carefully.
The statement supported further investigation, but it could not independently establish what had happened to the documents.
That evening, the contractor supplied a second set of records. Several entries showed that Shaw had accessed the building's facilities system after his official assignment ended.
The access logs also revealed that someone had repeatedly searched for Paul Bennett's employee number.
The searches began shortly before Bennett disappeared.
They continued for several days afterward.
Evelyn brought the pattern to Hayes.
“Someone was tracking Bennett's access before and after his disappearance. The activity overlaps with the unauthorized archive entries.”
Hayes studied the timeline.
“This is becoming more serious. We need to determine whether Bennett left voluntarily, whether he was threatened, and whether anyone interfered with his records.”
Judge Whitmore joined the secure meeting.
“Has there been any contact with his family?”
“Investigators have spoken with his relatives,” Hayes replied. “No confirmed location has been established yet.”
The judge looked troubled.
“Then locating him should remain a priority. If he is alive and has information about the missing documents, his safety matters as much as the evidence.”
Evelyn agreed.
The team prepared a coordinated plan to locate Bennett, secure the remaining records, and establish the extent of the unauthorized access.
Before the meeting ended, Nina received another alert.
A storage device associated with the missing equipment had appeared in an online resale listing. The listing contained a photograph of an old network drive, and a partially visible inventory sticker matched the courthouse's equipment records.
The seller's account used the name Victor Shaw.
Hayes immediately instructed the team to preserve the listing and pursue the appropriate legal process to identify the seller and locate the device.
The discovery was significant.
But it also created a new danger.
If Shaw realized that investigators had connected him to the missing equipment, he might destroy the remaining evidence or disappear.
Evelyn looked at the photograph of the drive.
“We need to move quickly, but carefully.”
Judge Whitmore nodded.
“Then make sure every step is documented.”
Outside the courthouse, evening settled over the city.
Somewhere, Paul Bennett was still missing.
Somewhere, the original files might still exist.
And somewhere in the renovation network, someone had begun to realize that the investigation was closing in.