The 72-Hour Evidentiary Chain

Within less than 72 hours, the documented record reflects a continuous sequence of internal warning, federal disclosure, executive acknowledgment, HR preservation, IT corroboration, and termination.

Oct. 17, 2023 — Internal Warning

Plaintiff warned Nuvem leadership that SolarWinds required “master-key” sysadmin access capable of querying system tables containing regulated healthcare and PII-related information.

Oct. 19, 2023 — HHS OCR Filing

A federal HIPAA breach notice was filed with the U.S. Department of Health and Human Services Office for Civil Rights regarding the proposed provisioning of elevated administrative access.

Oct. 19, 2023 — Executive Acknowledgment

Hours after the HHS OCR filing, Nuvem VP Luigi Squillante requested the federal filing confirmation “for our files,” documenting contemporaneous executive knowledge of the protected disclosure.

Oct. 20, 2023 — HR Record Preservation

HR responded in writing: “I will save this in your files.”

Oct. 20, 2023 — Internal IT Corroboration

Nuvem IT administrator Joel Ignatovich acknowledged the sysadmin concern, responding: “Lol that was my concern as well. We were on the same page for that.”

Oct. 24, 2023 — Morning-of-Termination Activity

Morning-of-termination emails show Plaintiff actively participating in company cybersecurity discussions with executive leadership hours before discharge.

Oct. 24, 2023 — Termination

Termination followed days after the protected disclosures and documented internal objections.