My Business Partner Wired Himself $2.3 Million and Changed the Locks. He Forgot I Built the Software.

Sarah was still sitting on the third stair.
“Dan. Talk to me. What are you looking at.”

I couldn’t answer yet.
I was scrolling.
The backdoor gave me a read-only view of every transaction that had moved through our company’s accounts in the last four years.
I’d built it after Renee, our first CFO, had funneled about $18,000 into a fake vendor before I caught her.
After that I promised myself I’d never be blind again.
I hadn’t logged in in over a year.
There’d been no reason to.
There was a reason now.
Starting eleven months ago, small charges had begun appearing to a vendor called Halberd Analytics LLC.
Two thousand here.
Thirty-two hundred there.
Consulting fees.
Software licensing.
Data services.
I’d never heard of Halberd Analytics.
I was the CTO.
I approved every software vendor.
Eleven months of Halberd charges added up to $186,000.
Then, three weeks ago, the pattern changed.
A single wire: $340,000.
Described as “Q3 Strategic Advisory Retainer.”

Two weeks ago: $612,000.
“Platform Migration Consulting.”

Six days ago: $1.35 million.
“Acquisition Advisory & Transition Services.”

I did the math three times because my brain wouldn’t accept it.
$2.3 million, gone, in three weeks.
To a vendor that didn’t exist.
I opened a new tab and searched the Indiana Secretary of State business registry.
Halberd Analytics LLC.
Registered fourteen months ago.
Registered agent: a law firm in Carmel I’d never heard of.
Sole member: a name I didn’t recognize.
Kevin Thorley.
I searched Kevin Thorley on LinkedIn.
Kevin Thorley was Marcus’s brother-in-law.
Married to his sister Beth.
Lived in a subdivision outside Fishers.
Sold commercial insurance.
Sarah came over and stood behind my chair.
“Sarah. He set up a fake company in his brother-in-law’s name and wired himself two point three million dollars from our accounts.”

She put her hand on my shoulder.
“Call the police.”

“Not yet.”

“Dan.”

“Sarah. Listen. If I call the police right now, this becomes a criminal case. Which is fine. But criminal cases take two years. And by the time it’s over he will have burned through the money, hidden it, or paid the best lawyer in Indianapolis to make it disappear. And the company will be gone.”

“Then what do we do?”

I sat back and looked at the screen.
“We take back what’s ours. Legally. Quietly. And we make sure that when the police do come — and they will — Marcus is the one standing in a parking lot with a broken keyfob.”

She was quiet for a long time.
“You have that look,” she said finally.
“What look.”

“The one you had when Renee tried it. When you were up for three nights and didn’t tell me why until it was done.”

“Yeah. That look.”

—

I called Priya first.
She answered on the fourth ring.
It was 4:30 a.m.
in Seattle.
“Dan? Is everything okay?”

“Priya. Did you restructure the company. Did you create a board. Did you vote to remove me last night.”

Long silence.
“What are you talking about.”

I told her.
All of it.
The parking lot.
The polo guys.
Marcus’s exact words.
“Dan, I haven’t touched anything. I signed some paperwork two months ago that Marcus said was a routine annual filing. He said you’d already signed.”

“I hadn’t signed anything.”

“Oh my God.”

“Priya. I need you to do three things today. Don’t sign anything else Marcus sends you. Get on a flight to Indianapolis. And bring your attorney.”

“He’s in Seattle.”

“Then bring him. I’ll cover his ticket.”

“Dan. What did Marcus do.”

“He forged your signature to invent a board. Then the fake board voted to fire me. Then he wired himself two point three million dollars in the last three weeks alone. Probably because there’s a buyer, and he wants the company clean of me before the sale closes.”

Priya said a word I didn’t know she knew.
“I’ll be there tomorrow.”

—

The next call was to a woman named Denise Aoki.
Denise had been our outside employment counsel for six years.
Sharp.
Expensive.
The kind of lawyer who returned calls in eighteen minutes because she billed you for the twenty.
I told her everything except the backdoor.
“Dan, I have to ask. How do you know about the wire transfers if you’ve been locked out of the systems?”

“I have a personal archive.”

“Is your personal archive legal?”

“I built every system in that company. I am the system administrator of record. My access was never formally revoked. It was revoked this morning by a board that doesn’t exist.”

She thought about that.
“That’s a defensible position. Barely. Don’t do anything else in those systems until I tell you it’s safe. And don’t tell anyone what you saw. Not your wife, not your priest, not your dog.”

“Too late on the wife.”

“Then don’t tell your dog. Dan, listen to me. If what you’re describing is real, we don’t just have wrongful termination. We have wire fraud, we have securities fraud if there was an acquisition in progress, and we have identity theft against your investor. This is not a small case.”

“Good.”

“But we do it my way. No cowboy stuff. Deal?”

“Deal.”

I hung up.
Then I opened a new browser tab, logged back into the backdoor, and started downloading everything.
Because I love Denise.
But I do not trust that Marcus wouldn’t figure out the backdoor existed within 72 hours if he brought in a competent forensic accountant.
Which meant I had exactly one window to copy every piece of evidence in that system.
And it was open right now.
—

I worked for eleven hours straight.
I pulled every wire transfer.
Every vendor invoice.
Every Halberd document.
Every email between Marcus and Kevin Thorley that had ever touched a company server.
Every board resolution — including the forged one, dated the previous night, with a signature block for Priya that was pasted in from a scan of a check she’d endorsed in 2021.
I pulled cap table changes.
I pulled the acquisition NDA that Marcus had signed nineteen days ago with a company called Meridian Group.
I pulled Meridian’s letter of intent: $47 million, all cash, closing target December 15th.
$47 million.
Marcus had been planning to sell our company — the company I’d spent eleven years building — for forty-seven million dollars, without telling me.
And he’d needed me out of the way before the closing, because as CTO with 40% equity, I’d have seen the payout and asked the wrong questions.
The $2.3 million he’d already taken was just the appetizer.
At 6:20 p.m., Sarah put a plate of pasta on the desk next to me.
“You haven’t eaten.”

“I’ll eat.”

“Dan. Emma’s home from practice. She wants to know if you’re okay. She saw the box of stuff you brought back from the office.”

I looked up.
“Tell her I’m fine. Tell her I’m working on something.”

“That’s what you said the week before you caught Renee.”

“Yeah.”

She kissed the top of my head and left.
At 9:47 p.m., my phone buzzed.
A text from Marcus.
Hey man.
I know today was rough.
I want you to know none of this is personal.
Let’s grab coffee next week and I’ll walk you through the settlement.
You’re going to be taken care of.
Really.
I stared at it for a full minute.
Then I typed back:

Sounds good.
Thursday?
Three dots.
Then:

Thursday works.
Corner Bakery in Carmel, 10am?
Perfect.
I set the phone down.
I had six days.
—