Some claimed the officer was part of a conspiracy.
Some identified the wrong store employee.
One video falsely named the sales associate as the person who planted the bracelet.
The investigator was furious.
She called the corporate attorney at 7:10 the next morning.
“You need to protect that associate.”
“We are.”
“Online people are blaming her.”
“We issued a correction.”
“Not enough.”
“What do you want?”
“Say clearly she was the witness who challenged the detention.”
The attorney hesitated.
“That could make her a target.”
“She already is.”
The store released a statement.
Unusually direct.
It confirmed that a sales associate had attempted to correct inaccurate information during the incident and was cooperating as a witness.
Her name remained private.
That helped.
Then the investigator watched the mirrored security footage.
The room contained representatives from the monitor's office, corporate legal, police internal affairs, and eventually the district attorney.
The footage began with her at jewelry.
Bracelet placed back.
Sales associate locks display.
Security manager approaches.
They enlarged the image.
He waits until the associate turns.
Uses a management key.
Opens the case.
Removes the bracelet.
Closes it.
Walks toward perfume.
The investigator watched herself in the mirror.
Then his hand.
He places the bracelet inside the yellow bag.
Clear.
No ambiguity.
Nobody spoke.
The investigator felt no satisfaction.
Only anger.
The security manager had not improvised.
His movements were smooth.
Practiced.
That thought entered everyone at roughly the same time.
An internal-affairs investigator asked:
“How often has he done that?”
The corporate attorney replied:
“That is what we need to determine.”
The investigator shook her head.
“No.”
They looked at her.
She pointed toward the screen.
“That isn't the first question.”
“What is?”
“Who knew his recovery numbers were impossible?”
The attorney's face tightened.
The investigator continued.
“You don't get double the regional recovery rate for two years without somebody asking why.”
Silence.
“If nobody asked because the numbers looked good, that's part of the problem.”
The investigation widened.
The security manager was suspended immediately.
Then terminated.
But firing him became the smallest consequence.
Store footage from older cases had been deleted.
Not all of it.
The mirrored system did not exist then.
But other evidence remained.
Door-access records.
Register logs.
Display-case key records.
Police body cameras.
Employee schedules.
Customer receipts.
The investigator built timelines.
One by one.
A woman accused of stealing earrings.
Display access log showed the security manager opened the case three minutes after she tried them on.
No sale.
Seven minutes later he followed her to handbags.
The earrings were later “recovered” from her coat pocket.
Another case.
Designer cardholder.
Security manager accessed stockroom shortly before the stop.
Inventory record had already listed the item as damaged and scheduled for write-off.
Yet it became “stolen merchandise.”
Another.
Perfume.
Travel bottle came from a promotional sample inventory with no retail barcode.