Because he had just recognized the authorization number displayed on Claire's screen.
It belonged to an account that should have been inactive for nearly three years.
And only three people in the entire department knew how to reactivate it.
The name Thomas Vance remained on Claire Bennett's screen.
For several minutes, she studied the financial records without saying anything.
The regional coordinator had been responsible for reviewing North River's compliance reports for almost five years.
He had signed the previous year's inspection certificate.
He had approved the department's federal funding renewal.
And he had personally authorized the final review that concluded there were no significant irregularities in the narcotics evidence system.
Now his employee identification number was appearing in a financial document connected to the very operation he had supposedly been monitoring.
It was no longer reasonable to dismiss the possibility that someone inside the federal oversight system had been helping conceal the corruption.
Nathan Brooks stood beside her desk.
NATHAN BROOKS: We've verified the identification number twice. It belongs to Vance.
CLAIRE BENNETT: What about the payment?
NATHAN BROOKS: The transaction was scheduled through a consulting company registered in Delaware. The company has no employees and no documented business operations.
CLAIRE BENNETT: Who owns it?
NATHAN BROOKS: A former business associate of Vance.
Claire looked at the transaction amount.
It was $175,000.
CLAIRE BENNETT: Has the payment been completed?
NATHAN BROOKS: Not yet. The financial team is attempting to freeze it.
CLAIRE BENNETT: Make sure the request goes through an independent channel. I don't want anyone connected to the regional office receiving advance notice.
Nathan nodded.
NATHAN BROOKS: Understood.
Claire closed the spreadsheet.
She had a difficult decision to make.
Thomas Vance was a senior federal official.
He had access to internal audit schedules, inspection authorizations, confidential witness information, and investigative assignments.
If he had been informing the people under investigation about upcoming inspections, the entire oversight system could have been compromised.
More importantly, he might have known about Claire's visit before she entered North River.
She picked up her phone.
CLAIRE BENNETT: Nathan, I want the original inspection notification records.
NATHAN BROOKS: All of them?
CLAIRE BENNETT: Yes. I want to know who accessed my assignment, when it was accessed, and whether anyone downloaded or forwarded the notification.
Nathan returned to his computer.
Within minutes, he located the relevant access history.
The inspection had originally been scheduled as an internal federal operation.
Only four individuals had access to the final authorization.
Claire.
Her direct supervisor.
Nathan Brooks.
And Thomas Vance.
Claire leaned forward.
CLAIRE BENNETT: Open the access history.
Nathan displayed the records.
The first three entries were ordinary.
Claire had reviewed the authorization.
Nathan had confirmed the inspection location.
Her supervisor had approved the operational budget.
Then another entry appeared.
THOMAS VANCE.
The file had been opened at 8:16 p.m. the previous Thursday.
A second entry showed that it had been downloaded.
A third showed that the document had been forwarded to an external email address.
Claire stared at the screen.
CLAIRE BENNETT: Can you identify the destination?
Nathan opened the transmission details.
NATHAN BROOKS: The address is connected to a private legal consultancy.
CLAIRE BENNETT: Who owns it?
NATHAN BROOKS: Edward Mitchell.
Claire immediately recognized the name.
Mitchell was the registered owner of the Riverstone Logistics property.
The same facility where the missing narcotics had been stored.
CLAIRE BENNETT: Vance sent the inspection authorization directly to the company connected to the evidence operation.
NATHAN BROOKS: That's what the records indicate.
CLAIRE BENNETT: Preserve everything.
NATHAN BROOKS: Already done.
Claire stood up.
She walked toward the window and looked down at the street.
The investigation had begun with a simple discrepancy between two inventory records.
It had uncovered a network of officers moving narcotics through private storage facilities.
It had revealed payments to senior police officials.
It had exposed a prosecutor who allegedly influenced the outcome of criminal cases.
And now it had identified a federal employee who appeared to be warning the people under investigation.
Someone had known Claire was coming.
Someone had instructed the department to remove evidence.
Someone had tried to stop her before she could reach the original records.
And Daniel Cole's behavior at reception had become part of a much larger pattern.
Claire returned to her desk.
CLAIRE BENNETT: I want Vance's office secured.
NATHAN BROOKS: Should we notify his regional director?