I explained only that someone close to me might attempt to obtain information about company accounts or records.

She didn’t press for details.

Together, we reviewed access permissions, authorized users, vendor payment procedures, and the shared password manager.

I discovered that Spencer had never held a formal role in Albright Financial Consulting, but I had added his email address to a travel-expense folder months earlier so he could help organize one of my conferences.

From there, he had been able to see certain invoices and client names.

It wasn’t an open door to our bank, but it was more access than he needed.