Chapter 2 - ATLAS

Morgan Systems did not build consumer software.
Its clients were regional commercial lenders.
Banks used the company’s platform to evaluate:
small-business loans,
equipment financing,
commercial property applications,
and private credit portfolios.
ATLAS was Ethan’s largest internal project.
It took documents from messy loan files and converted them into structured risk models.
Tax returns.
Rent rolls.
Bank statements.
Borrower histories.
Property schedules.
Debt-service calculations.
The system did not make final lending decisions.
Humans did.
But ATLAS could process thousands of files faster than teams of analysts.
Morgan Systems had approximately:
$26 million annual recurring revenue.
Ninety-one employees.
Six major banking clients.
ATLAS was supposed to unlock the next stage.
A $30 million growth financing facility from Harbor Ridge Capital.
The financing would fund:
hiring,
data-center upgrades,
and expansion into larger lenders.
The lender’s term sheet included strict conditions.
No material data-security event.
No undisclosed regulatory investigation.
No breach of customer confidentiality obligations.
Claire knew almost none of that.
She knew Ethan had been working late for more than a year.
She knew he talked about:
“closing the facility.”
She knew he canceled:
a vacation,
their anniversary dinner,
and three weekends with her family.
She did not know a single corrupted file could affect the financing.
Ethan did.
That was why his face changed.
The laptop did not matter.
The repository was backed up.
The six banking clients did not all use ATLAS the same way.
Two used it only for analyst support.
Three used it during underwriting preparation.
One used it for portfolio monitoring after loans closed.
That mattered because the data contracts differed.
Some records were covered by:
bank confidentiality clauses.
Some by:
state privacy requirements.
Some by:
commercial agreements that imposed notification duties even when no statutory breach occurred.
Grace explained the distinction to Ethan.
“Do not say ‘no breach’ just because Social Security numbers were absent.”
“What do I say?”
“Say we are investigating an unauthorized transmission of customer-derived information.”
“That sounds worse.”
“It sounds accurate.”
Ethan hated legal accuracy when it made him look weaker.
That feeling would repeat often over the next month.
May you like
The hardware could be replaced.
The data inside the package was different.