Chapter 6 - Vittorio’s Dossier Was Real, the Medical Leak Was Not

The week apart became nine days.
Liya went to work.
Class.
Hospital internship.
Silverline banquet.
Eleanor had treatment.
Adrian did not appear.
He sent one message on the fifth day:
Your mother’s next infusion is tomorrow. I hope it goes smoothly. No reply needed.
Liya did not reply.
But she saved it.
Then Dana Cole called.
“We have something on the doxxing.”
Liya sat up.
“What?”
Adrian’s counsel and a digital-forensics firm had traced the first anonymous social post to an account created through a prepaid mobile service.
Not enough.
But a subpoena in a related civil proceeding involving family-office misuse? Could be too fast. Better internal audit discovered.
Moretti family office had conducted an internal access audit after Vittorio lost advisory privileges.
One employee:
Marcus Bell, research analyst.
He had compiled a dossier on Liya the morning after the gala.
Contents:
public voter-registration data where available,
property records,
old college directory,
Silverline vendor page,
social-media posts,
Eleanor’s church-group posts visible through a member whose account Marcus used? Need not illegal hacking. Better he joined public-facing group? Keep public/open info.
He had also purchased a commercial people-search report.
Then emailed a summary to Vittorio.
Subject:
Hart background.
Vittorio replied:
Find out whether she has debt and whether Moretti is paying it.
There.
Marcus later forwarded selected public-record findings to a freelance gossip columnist he knew.
Why?
He said Vittorio had told him:
“Make sure Adrian understands what kind of story this becomes.”
No written instruction to leak.
But Marcus admitted:
he believed publicity was desired.
Company policy prohibited using family-office research resources for personal relationship surveillance without legal/compliance purpose.
Marcus was terminated.
Could he be criminally charged?
No evidence of hacking,
stolen medical records,
threats,
extortion.
Employment misconduct and potential civil privacy claims depending data source.
Vittorio denied ordering a leak.
Did he order research?
Yes.
Improper under family-office policy.
He lost remaining access to family-office staff and was billed? Maybe no.
Independent trustees censured him and required personal inquiries be excluded from trust resources.
His ownership interest remained.
Then the medical information.
The dossier did not contain confidential medical records.
Eleanor’s lymphoma stage came from a public church fundraiser post shared months earlier.
The infusion reaction detail came from:
the freelance photographer observing medical vehicles,
plus a neighbor who told him “she had some kind of reaction,”
plus Liya’s own hurried comment to a coworker who later spoke to a reporter thinking it was harmless.
The coworker, Samantha Reed, apologized.
“I didn’t think they’d print it.”
Liya was furious.
Then less.
Samantha had said:
Liya left because her mom reacted to treatment.
Not:
diagnosis details.
The reporter combined breadcrumbs.
No HIPAA conspiracy.
The home-infusion provider’s privacy review found no evidence its staff disclosed protected information.
Important.
Then Dana said:
“We can send a demand to the columnist about the residential address and inaccurate debt figure. We can also pursue Marcus and potentially Vittorio civilly, but damages and legal costs are uncertain.”
Liya asked:
“What does Adrian want?”
Dana paused.
“I’m your lawyer for this consultation. I don’t care what Adrian wants.”
Good.
Then:
“What do you want?”
Liya wanted:
her mother’s address removed where possible,
the false debt number corrected,
Marcus’s dossier destroyed subject to legal retention,
assurance Moretti family office would not research her again.
She did not want:
million-dollar lawsuit,
public trial,
years.
Dana negotiated.
The gossip site corrected:
the $42,000 figure was unsupported.
Removed street address.
Not entire story.
Marcus signed:
no further dissemination.
Company retained forensic copy for litigation/compliance.
Personal copies deleted where verified.
Moretti family office adopted:
no personal-background research on principals’ romantic interests absent documented security, legal, compliance, or consent basis.
Vittorio objected.
Lost.
Then Liya and Adrian met.
Neutral place:
a park café.
No private room.
Adrian looked tired.
“I’m sorry about Marcus.”
“You didn’t order it.”
“I created an office where my uncle could request too much without challenge.”
There.
Liya nodded.
Then:
“And the security car.”
“Yes.”
“What did you learn?”
He almost smiled.
“That this is a test.”
“It is.”
Then:
“I learned that a threat assessment is not the same thing as my fear.”
Good.
“And?”
“That offering protection is different from installing it.”
Good.
“And?”
“That if I cannot tolerate you saying no to my preferred solution, I am not protecting you.”
There.
Liya sat back.
“Okay.”
“Okay meaning?”
“We can keep seeing each other.”
His shoulders relaxed.
Then she added:
“But I want something in writing.”
He blinked.
“About us?”
“About security.”
That surprised him.
Liya had learned from health systems:
good boundaries should survive mood.
They wrote a simple protocol with Daniel.
Not legal contract.
Shared plan.
Default:
no tracking.
no standing residential detail.
Liya may request escort/transport.
Specific credible threat triggers recommendation; emergency imminent threat allows normal emergency action.
Any longer-term measure discussed with Liya.
No family-office research on her.
No security contact with her employer absent safety emergency or her consent.
Adrian signed metaphorically? Could just agreed and Daniel documented.
Daniel documented.
Then:
“What about Eleanor?”
Her choices separate.
She could request help herself.
No assumption Liya speaks for her capable mother.
Good.
Then relationship resumed.
No grand kiss.
They had coffee.
Then dinner days later.
Then Liya went to Adrian’s apartment again.
Choice.
Then the five women story returned at a major hospitality summit.
All five were attending.
Not because of Adrian.
They had jobs.
Sofia:
shipping panel.
Priya:
capital markets.
Camille:
cybersecurity.
Elena:
hotel redevelopment.
Alessandra:
philanthropy and public-private partnerships.
Liya attended too.
As what?
Not Adrian’s date.
Her cancer-center internship had sent her to a patient-access conference in the same convention complex? Could be contrived.
Better Silverline staffed the summit and Liya took one final banquet shift for money.
There.
She wore black uniform.
Adrian was on stage.
Press noticed.
Headline bait.
Then Sofia walked up to Liya at service station.
“Number Six.”
“Number One.”
Priya joined.
“I object to numbering.”
Camille said:
“I object to being called powerful before coffee.”
Elena Marchand looked amused.
Alessandra arrived last.
For five seconds, the internet’s fantasy almost existed:
five wealthy women surrounding the waitress.
Then Priya asked:
“Can we get sparkling water?”
Liya laughed.
“I am actually working.”
“Exactly.”
She served them.
No one made it symbolic.
Then a photographer shouted:
“Adrian! Which woman are you leaving with tonight?”
The room tightened.
Adrian looked toward:
Sofia,
Priya,
Camille,
Elena,
Alessandra,
then Liya.
He could have made a romantic declaration.
He did not.
He said:
“That is a disrespectful question to six professionals who are here for reasons unrelated to my private life.”
Then continued walking.
Liya liked that more than:
her.
Because she was at work.
Not a prize to point at.
Later, after shift, she met Adrian outside.
He asked:
“Can I take you home?”
“Yes.”
Then Sofia passed and called:
“Don’t let him choose the route.”
Liya laughed.
Adrian groaned.
The five women were becoming less mythic every time Liya met them.
They had:
businesses,
egos,
mistakes,
lives.
Only one had seriously wanted to marry Adrian at the same time as the press narrative.
Another had once loved him.
Another had dated him.
Two barely qualified.
The story needed five because five sounded like a contest.
Reality did not.
Then Liya leaned against the car.
“Do you know what’s funny?”
“What?”
“You never had five women fighting over you.”
“No.”
“You had an uncle making spreadsheets.”
Adrian looked pained.
“That is much less flattering.”
“Good.”
Then he kissed her.
After asking.
The story kept trying to turn Liya into the woman Adrian chose over five powerful women.
But the more accurate version was harder to fit in a headline.
Adrian was learning to stop letting other people define relationships as transactions.
And Liya was choosing him only in the spaces where he left her room to choose.
Liya also insisted that Marcus Bell not become a cartoon villain.
Dana explained what the internal report actually showed.
Marcus was twenty-nine.
Research analyst.
Good performance reviews.
No prior discipline.
Vittorio had been a senior family figure who routinely requested:
background packets,
public-record summaries,
press histories,
litigation checks
on people around family transactions.
Marcus had seen similar requests approved before.
The problem was that this request concerned Adrian’s romantic life, not a documented business or security need.
He should have challenged.
He did not.
Then he leaked selected information to a columnist.
That part was clearly his choice.
When interviewed, Marcus said:
“I thought Mr. Vittorio wanted Adrian embarrassed enough to end it.”
No written order.
No threat.
He had converted implication into action.
Familiar.
Liya almost felt sorry for him.
Then remembered:
her mother’s address had been amplified.
her work had been disrupted.
her financial life turned into content.
Understanding pressure did not erase responsibility.
Marcus’s termination remained.
Dana negotiated a civil settlement:
modest payment toward legal/privacy costs,
no admission of criminal conduct,
non-disparagement limited so it did not prevent truthful statements,
data deletion obligations where lawful.
No life-destroying judgment.
Then Vittorio’s own family-office conduct review found another example:
he had ordered a background summary on Alessandra Vieri’s former boyfriend before a proposed family dinner.
Alessandra had never authorized.
That strengthened the governance case.
This was not only about Liya.
The office had become a tool for private social strategy.
The trustees rewrote scope:
research requests require documented business, legal, security, compliance, or due-diligence purpose.
Romantic suitability is not a purpose.
Simple.
Then Adrian told Liya:
“I should have fixed that years ago.”
“Yes.”
He did not ask:
Do you forgive me?
May you like
Good.
Institutional repair was not a relationship favor.