This instructional case provides auditing students an opportunity to examine an interesting real-life embezzlement and financial statement fraud occurring at a publicly traded company in the post-Sarbanes-Oxley (SOX) era. The case focuses on independent auditors' and senior management's reporting responsibilities related to internal control over financial reporting involving smaller public companies (nonaccelerated filers). While all public companies are subject to external auditor and management attestation on the effectiveness of internal control over financial reporting following SOX, the Securities and Exchange Commission (SEC) granted nonaccelerated filers numerous extensions for the effective date of required auditor attestation. In 2010, President Obama signed legislation to permanently exempt nonaccelerated filers from auditor attestation. The case also highlights inherent risk assessments by the independent auditor when one individual holds multiple C-level titles (Chief Executive Officer, Chief Financial Officer, Chief Operating Officer, etc.) within the organization concurrent with membership on the board of directors, and requires students to recommend internal control policies and procedures designed to prevent or detect the embezzlement.