Chapter 7 - The Audit Trail
My cubicle on the fourth floor of the Riverside Health Network administrative pavilion was small, quiet, and faced an interior courtyard planted with river birch trees.
On Wednesday morning, three weeks after my discharge from the emergency room, I sat before my three twenty-four-inch monitors, wearing my black thermoplastic brace under an oversized cardigan, typing with my left hand while my right rested on an ergonomic foam support.
The screen displayed an internal audit log from the hospital network’s patient privacy gateway.
As an auditor, my job was to monitor compliance with federal privacy regulations, ensuring that medical records were not accessed by employees who lacked a clinical or administrative justification. Every query, every keystroke, every viewing of an electronic chart left an immutable digital fingerprint in the system’s transaction ledger.
A notification flag had appeared in my queue at eight-fifteen that morning: AUDIT EXCEPTION — ACCESS TO SENSITIVE RECORD (EMPLOYEE/FAMILY).
I clicked the log entry.
The record that had been accessed was mine: HAYES, ALARA — MRN 884-12-901.
The date of the query was October twelfth—forty-eight hours before Vivian’s wedding.
The user credentials associated with the session were not mine. They did not belong to Dr. Walsh, my neurologist, nor did they belong to Dr. Chen in the emergency department.
The query had been initiated from a terminal registered to The Department of Physical Medicine & Rehabilitation, Clinical Pavilion B.
The user login was: G_HAYES_CONSULT.
My fingers froze over the keyboard.
Gerald Hayes did not work for Riverside Health. But his automotive supply firm held the primary commercial contract for the hospital network’s fleet logistics, and as part of that contract, his company maintained three administrative terminals in the maintenance annex to coordinate medical transport vehicles.
I opened the deep audit packet, bypassing the surface user interface to pull the raw SQL query logs from the database server.
The user had not just viewed my diagnosis.
The user had downloaded ninety-four pages of clinical notes: my functional capacity evaluations, my nerve conduction velocity studies, and the confidential disability assessment Dr. Walsh had submitted to the Social Security Administration’s vocational rehabilitation division eighteen months earlier.
Attached to the export record was an automated transmission log.
The entire medical file had been sent via secure PDF to an external email address: [email protected].
My heart began to hammer against my ribs with a rhythm so violent it made the healing bone in my shoulder ache.
Vivian hadn't just guessed that my condition was variable. She hadn't just listened to me complain about fatigue over Sunday dinners.
She had had my father use his vendor credentials to steal my confidential neurological records, cross-referencing my functional capacity scores to find the exact clinical thresholds where my muscle endurance failed.
She had known, to the precise minute, how long I could stand before the femoral nerve signals deteriorated.
She had known that after four minutes of unsupported standing at the church altar, my quadriceps would be in clinical refractory spasm.
She had known that when she pulled me out of that chair in the ballroom, there was zero physiological possibility that my legs would hold my weight.
It wasn't vanity.
It wasn't stress.
It wasn't a sudden, petulant burst of bridal rage.
It was a premeditated, calculated trap designed to stage a physical failure in front of two hundred people, providing the visual and social justification for the prenuptial exclusion clause Daniel had refused to sign.
"Alara?"
I looked up.
Jen, my department supervisor—the same woman who had called 911 for me three years earlier when my hands stopped working—stood at the entrance of my cubicle, holding two mugs of tea.
She took one look at my face, set the mugs down on the filing cabinet, and pulled my rolling door shut.
"What did you find?" Jen asked, her voice dropping into the low, protective tone of an older sister who actually understood what the word meant.
I pointed at the center monitor with a shaking finger.
"My sister," I whispered. "She pulled my disability files through Dad’s fleet account."
Jen leaned over my shoulder, her eyes scanning the SQL logs, her face hardening from professional calm into the terrifying, icy fury of a hospital administrator whose data perimeter had been violated.
"She used a Tier-One vendor portal to breach an employee’s protected neurological records?" Jen asked, her voice deadly quiet.
"Yes."
"And she sent it to a private commercial competitor?"
"Yes."
Jen stood up straight, pulled her security badge from her lanyard, and tapped it against the edge of my desk.
"Don't touch that keyboard, Alara," Jen said. "I am locking this workstation. I am calling the Chief Legal Officer, the head of Information Security, and the regional investigator for the Office for Civil Rights."
"Jen... my dad's contract," I murmured, an ancient, residual instinct of family protection flaring up in my throat before I could choke it down.
May you like
Jen looked at me with an expression of profound, unyielding sorrow.
"Alara," she said softly, resting her hand on my uninjured shoulder. "Your father committed a Class-D federal felony to help your sister humiliate you on a dance floor. His contract isn't your problem anymore. It's his prison."
