He was instructed not to access the property seizure archive or contact witnesses about the case.
The department's property operations account was restricted.
The pending archive cleanup was suspended.
An independent technical team preserved the relevant server data and created forensic copies of the available records.
The county also suspended new assignments to Kingsland Recovery while its contract and inventory procedures were reviewed.
The company disputed the decision.
Its representatives argued that the recovery service had operated under county instructions and that any discrepancies were administrative rather than intentional.
They also stated that Marcus Bell's records were incomplete and should not be treated as proof of misconduct.
Investigators agreed that the documents had to be assessed carefully.
They did not assume that every discrepancy represented a crime.
Instead, they compared the company's records with independent sources.
That process uncovered another important issue.
The administrative account used to submit recovery requests was not assigned to one individual.
Several employees had access.
The account history showed activity from workstations associated with the sheriff's administrative office, the property department, and the chief administrative clerk's office.
The system did not clearly identify which individual had entered every request.
This made attribution more difficult.
Investigators needed to determine who had been using the account at specific times.
They examined login records, workstation assignments, email communications, and approval histories.
The chief administrative clerk, Martin Greaves, was asked to provide an explanation.
At first, Greaves stated that the shared account had been created for administrative convenience.
He said that multiple employees needed access to property records and that the system had not been designed to identify every individual action.
Investigators asked why the account had been used to create recovery assignments before certain traffic stops.
Greaves said he was unaware of the timing discrepancies.
He also denied approving any improper seizure.
But his explanation raised further questions.
Several emails showed that he had communicated directly with Kingsland Recovery supervisors about priority vehicle transfers.
One message referred to a monthly property value report.
Another asked the company to confirm the location of several high-value vehicles before the next administrative review.
A third message referred to the need to resolve outstanding inventory differences before the county's annual contract assessment.
Greaves said the messages were routine administrative communications.
Investigators continued examining them.
During the review, they discovered that the shared account's permissions had been changed shortly after the incident involving Naomi.
The change had restricted access to the historical property archive.
The timing was significant.
The request had been approved through Greaves's office.
Investigators asked him why.
He stated that the changes were part of a planned system maintenance process.
However, the original maintenance schedule showed that the changes were not due to begin until later.
The early restriction required additional explanation.
Greaves was placed on administrative leave while the review continued.
At Kingsland Recovery, investigators conducted an inventory inspection.
They examined the storage facility and compared the vehicles present with the company's records.
The inspection found several vehicles whose identification numbers required additional verification.
Some had complete paperwork.
Others had incomplete transfer documentation.
A number of vehicles were connected to cases that had been closed without a clear final property disposition in the county's records.
Investigators also located Naomi's red Ducati.
It was secured inside a storage building.
The motorcycle appeared intact, although its condition needed to be documented carefully.
The red bodywork had no obvious major damage.
The mirrors were still attached.
The seat and controls appeared undisturbed.
A qualified technician inspected the motorcycle and recorded its condition.
Photographs were taken from multiple angles.
The vehicle identification number was verified against the original registration.
The inspection report confirmed that the motorcycle was the same Ducati taken from Naomi on Kingsley Road.
Margaret received the report that afternoon.
MARGARET ELLIS: "Naomi, they've located your motorcycle."
Naomi looked up immediately.
NAOMI WHITLOCK: "Is it damaged?"
MARGARET ELLIS: "The initial inspection shows no major visible damage. They've documented the condition and verified the identification number."
Naomi let out a slow breath.
NAOMI WHITLOCK: "Can I see it?"
MARGARET ELLIS: "Not yet. The investigators want to complete the evidence process before arranging its release."
Naomi nodded.
NAOMI WHITLOCK: "That's fine. I want the record completed properly."
Margaret showed her the photographs.
Naomi looked at the red Ducati.
For the first time in days, she felt some relief.
The motorcycle was still there.
It had not disappeared into an administrative system.
It had not been transferred to another location without explanation.
And it had not been sold.
But the investigation was far from over.
The county's review identified several affected property owners.
One was Robert Hayes, a small business owner whose work van had been seized during a roadside stop.
Robert used the van to deliver building materials and equipment.
When it was taken, he had been told that it was being held in connection with an investigation.
He had spent weeks trying to obtain information.
The county's records showed that the vehicle had been transferred to Kingsland Recovery.
The company's inventory showed a different storage reference.
The final disposition field was incomplete.
Robert had received several notices requesting payment of storage fees.
He had eventually borrowed money to pay the amount demanded, but the release process had taken longer than expected.
When investigators contacted him, he provided his payment receipts and the original notice of seizure.