Chapter 6 - THE NIGHT SOMEONE TRIED TO STEAL THE MODEL INSTEAD OF THE COMPANY
The cyberattack began at 2:13 a.m.
I know because NexaData’s security chief called me at 2:16.
Not because I ran the company.
Because the Arthur Vance Technology Trust required notification if protected model assets were accessed outside approved environments.
I answered.
“What happened?”
“Potential exfiltration.”
I was out of bed before he finished.
“Source code?”
“Model weights and training configuration.”
“How much?”
“Unknown.”
“Who?”
“Unknown.”
I stopped.
Old Valeria would have started issuing commands.
Then remembered.
Alicia was CEO.
“Is Alicia awake?”
“Yes.”
“Good.”
“I’ll come.”
At headquarters, the security operations center glowed blue.
Screens.
Incident responders.
Outside cyber firm.
Federal liaison because Project Sentinel review remained active.
Alicia stood in center.
She saw me.
“Observer.”
I almost smiled.
“Yes.”
Good.
No founder takeover.
Attack used valid credentials belonging to a former machine-learning engineer named David Kline.
David had left six months earlier.
His account should have been disabled.
It was.
Someone had created a service token linked to an old testing system before his departure.
The token remained active.
Another legacy failure.
Attackers used it to reach a development storage bucket.
They attempted downloading model weights.
Security monitoring caught unusual outbound volume and terminated connection.
How much left?
Approximately eighteen percent of encrypted package.
Was it usable?
Maybe not.
Could be.
We reported.
No hiding.
Then investigators traced infrastructure.
VPN.
Cloud.
Offshore servers.
Professional.
Northbridge?
Too obvious.
By noon, one IP connection led to a Chicago coworking office.
Security camera identified Peter Lang.
Sarah Levinson’s former fiancé.
The man who had stayed after Northbridge removed her from her company.
I stared at photograph.
“What does he have to do with us?”
Marcus answered.
“His current employer is Northbridge portfolio company.”
Of course.
Peter was detained for questioning but denied attack.
Then another name surfaced.
David Kline.
Former NexaData engineer.
He had recently received $180,000 consulting payment from a Northbridge affiliate.
David admitted creating token.
Claimed he believed Northbridge had board authorization to conduct technical due diligence.
Authorization document?
Signed by Julian.
Dated before his removal.
Broad language granting Northbridge access to “technical materials necessary to assess strategic investment.”
Not valid for post-removal access.
But enough for David to tell himself story.
Again.
Ambiguity weaponized.
Investigators found messages from Peter:
Need Sentinel model package before governance lock.
David:
I can reopen legacy token.
Peter:
Do it before Vance trust restricts.
Intent clearer.
They wanted model.
If Northbridge could not own NexaData, it could replicate product elsewhere.
Corporate theft.
Potential trade-secret charges.
Alicia looked at me.
“You okay?”
“No.”
“Good.”
I laughed.
Everyone had stolen phrase.
Then:
“Do you want to shut platform?”
The trust’s emergency provision allowed temporary restriction after confirmed IP theft attempt.
I considered.
Thousands of active customer shipments depended on predictions.
Attack contained.
No evidence production compromised.
“No.”
Alicia nodded.
“Agreed.”
Important.
Emergency power not automatically used because frightened.
We rotated credentials.
Reissued tokens.
Reviewed service accounts.
Customers notified of attempted breach where contract required.
Project Sentinel officials received same-day report.
The government did something unexpected.
They praised response.
Not public.
In review note:
Incident management demonstrated mature governance and transparent escalation.
A crisis became evidence of reform.
Not because attack good.
Because response mattered.
Northbridge’s legal position collapsed quickly.
Peter Lang’s device contained internal Northbridge documents.
One presentation titled:
CONTROL PATHS: NEXADATA / VANCE IP
Options:
1. Side-letter enforcement.
2. Founder pressure through liquidity.
3. License conversion.
4. Technical replication contingency.
Technical replication.
Corporate theft in PowerPoint.
Conrad Vale had attended presentation.
He claimed he opposed option four.
Minutes suggested otherwise.
Federal agents executed search warrants.
Northbridge investors panicked.
Several limited partners demanded review.
Conrad took leave.
Good.
Then Julian’s cooperation became more valuable.
Prosecutors no longer needed him to prove everything.
That weakened his leverage.
He still wanted to speak to me.
No.
Naomi did not.
Interesting.
She had become more realistic.
Iris came home from NICU healthy after twenty-six days.
Naomi sent one message through counsel:
She’s home. No response needed.
I didn’t respond.
Good.
Meanwhile, cyber incident created board debate.
A director argued NexaData should accept acquisition offer from a large public software company.
Safe harbor.
Cash.
Infrastructure.
No founder drama.
Alicia asked me:
“What do you think?”
“I think independent committee should evaluate.”
“What do you want?”
Different.
I looked around.
NexaData had once been dream Julian and I built together.
Selling felt like letting him win?
No.
That was emotional contamination.
The company did not need remain independent to prove I recovered.
“I don’t know.”
Alicia smiled.
“Excellent.”
Annoying.
Committee evaluated.
Offer undervalued growth.
Rejected.
Not symbolic.
Numbers.
Good.
Then Graham asked me to dinner.
Not work.
He said it clearly.
“Dinner.”
“We’ve eaten.”
“Food in conference rooms does not count.”
“What kind?”
“Date.”
I stared.
He did not retreat.
“You know I’m divorced.”
“Yes.”
“Publicly humiliated.”
“Yes.”
“Difficult.”
“Extensively documented.”
I laughed.
Then:
“No.”
He nodded.
“Okay.”
That was all.
No charm.
No second attempt.
We continued working professionally.
He did not change tone.
No sulking.
No strategic distance.
Three months later, I asked him.
“Dinner?”
He looked up from a Vance data-governance document.
“Work?”
“No.”
“Date?”
“Yes.”
“Are you sure?”
“No.”
“Good.”
Our first date was at a small Italian restaurant near the river.
He ordered pasta.
I ordered fish.
No champagne.
No inheritance.
No company papers.
He did not ask about Julian until I did.
“I keep waiting for you to ask.”
“About him?”
“Yes.”
“Why?”
“People do.”
“I read newspapers.”
“That is not same.”
He put fork down.
“What do you want me to know?”
That question.
My choice.
I told him.
Hospital.
Folder.
Divorce.
Naomi.
Inheritance.
Company.
He did not say:
I would never do that.
People love making promises against crimes they have never had opportunity to commit.
He said:
“What would make dating me feel unsafe?”
I stopped.
That was better.
“Pressure.”
“Financial entanglement.”
“Access to my passwords.”
“Being asked to prove trust by surrendering information.”
He nodded.
“Anything else?”
“Don’t tell me I’m overreacting unless you’re willing to be wrong.”
He smiled.
“Fair.”
Then:
“What would make dating you unsafe for me?”
I stared.
Of course.
Relationships have two people.
“I don’t know.”
“Think.”
I did.
“I could investigate you instead of talking.”
“Check records.”
“Assume secrecy.”
“Use resources you don’t have.”
“Exactly.”
He nodded.
“I need privacy too.”
“Yes.”
There.
A beginning.
We dated slowly.
No company overlap beyond existing professional roles.
Graham disclosed relationship to Vance board.
I disclosed to NexaData stewardship panel because of intercompany work.
Embarrassingly healthy.
Then cyber investigation reached its climax.
David Kline pleaded guilty to trade-secret conspiracy charges.
Peter Lang too.
Conrad Vale was indicted for conspiracy, securities fraud, and obstruction.
Northbridge’s civil suit against NexaData was stayed.
Project Sentinel review resumed fully.
And Julian’s attorney called Victoria with a new offer.
Julian would testify against Conrad.
In exchange, prosecutors would recommend reduced sentence.
He wanted one thing from me.
Not meeting.
A statement confirming he was not responsible for the cyberattack.
That was true.
I gave it.
Nothing more.
May you like
Accuracy is not forgiveness.
It is simply refusing to become what hurt you.
Related Stories
