once

Chapter 12 - WHAT THE RIDES REALLY WERE

The district wanted one number.

How much was stolen?

The independent auditor refused to give one too early.

Good.

Nineteen disputed rides tied to Mia, Olivia and Ethan.

Eleven corresponded to real emergency transports for other children.

Children living in shelters.

Temporary foster placements.

Family relocations.

The ride happened.

NorthStar incurred actual cost.

The record was false.

Whether the state should have reimbursed depended on eligibility that often existed but had not been entered correctly.

Four rides were duplicate claims.

Same vehicle.

Same GPS.

Same day.

Billed twice under different host IDs.

Fraudulent.

Three were empty validation loops.

No child.

Fraudulent.

One had incomplete evidence and remained disputed.

That was more complicated than:

NorthStar stole every dollar.

Laura’s draft memo had called all nineteen:

FICTITIOUS TRANSPORTS

She corrected it.

Publicly inside the investigation.

Not because anyone forced her.

“I was wrong.”

State auditor Mark Chen looked up.

“About which part?”

“I called real rides fictitious because my daughter’s name was fictitious.”

Good distinction.

“Eleven rides happened.”

“Yes.”

“Should Mia’s identity have been used?”

“No.”

“Should the claims have been filed that way?”

“No.”

“But actual transportation service occurred.”

“Yes.”

Laura amended her statement.

That mattered.

Then June Ellis’s role narrowed and worsened at the same time.

She had created the host system.

She had signed off on backfilled student records.

She knew the process violated district policy.

But she had also corrected dozens of rides properly.

Her spreadsheet showed relentless notes:

GET REAL ELIGIBILITY ID

REMOVE HOST

PARENT RECORD MUST NOT MOVE

STOP USING MIA C

She had tried to keep the shortcut temporary.

She failed.

Then four months before the current incident:

NO MORE HOST IDS.

Clear.

Why not disclose everything then?

Fear.

The district had already passed one state compliance review.

June knew admitting host IDs could trigger reimbursement clawbacks.

She worried NorthStar would suspend emergency service.

And she worried she would lose her job.

She chose concealment.

That decision allowed Logan to manipulate the old unresolved records.

But she had not ordered Mia onto a van.

Then Principal Reed’s six forms.

Four corresponded to real children who got needed rides.

Two were later duplicated by Logan.

Reed did not receive money.

No kickback.

No family connection to NorthStar.

His misconduct was different.

False certification.

Unsafe credential control.

Failure to report Laura’s warning.

Physical aggression toward Helen.

He was not the scheme’s mastermind.

Helen did not need him to be.

Then Dana Voss opened NorthStar’s company records completely under counsel.

She discovered Logan had inflated not only district host routes but mileage adjustments in two other contracts.

No child-identity issue there.

Just money.

The host program gave him a tool.

It did not create his willingness.

Then state investigators tested the forged parent signatures.

All copied from ordinary documents.

Denise’s from a field-trip permission slip.

Grace’s from a medication authorization.

Laura’s from a school volunteer form.

Every document had been stored in the same district document repository.

Access rights were too broad.

Logan’s vendor account had temporary read access years earlier for a migration project.

The district never fully revoked it.

Again.

The answer was not brilliant cybercrime.

It was old permissions nobody removed.

Then the district’s superintendent called the three mothers.

Not to ask forgiveness for everything.

To tell them all three children’s release records were corrected and locked.

Any future change required direct parent verification plus a second administrator.

Good.

Then Denise asked:

“How do I know somebody can’t just create another override?”

The superintendent started to answer.

Stopped.

Then said:

“You don’t. Not yet.”

Better.

The district hired an external security review.

That review found forty-three active legacy accounts.

HREED-ADMIN was only one.

May you like

The school had prevented one bad pickup day.

The system around it was still much larger than three grapes.

Related Stories

Other posts