Chapter 8 - Ethan had worked on our pilot program
Ethan was not my employee.
But Cross Meridian owned multiple properties protected by Vale systems.
Because they were a major client, Ethan served on a customer advisory group testing our newest access-management platform.
Name:
Sentinel OnePass.
It generated temporary credentials for:
Contractors.
Cleaners.
Event staff.
Vendors.
Delivery personnel.
Client administrators could issue credentials within strict limits.
Ethan had legitimate test access.
Not to Vale’s central systems.
To several Cross properties.
But during beta development, customer administrators were also given limited sandbox tools to report credential behavior.
That created a vulnerability.
Not one that allowed Ethan to break into any building in America.
But enough to manipulate credentials on properties his family controlled.
Then, through business relationships, he helped recommend our system to two other clients.
The same two that experienced breaches.
Coincidence?
May you like
Maybe.
Investigators began looking.
