The letters arrived at her storefront with her full legal name on them, written by a man she had never met.
A small business owner in Houston's Montrose district found the first envelope on camera. A man walked up, left a handwritten letter, and left. Then more envelopes arrived. Some were dropped at the door. Some came through the mail. She counted at least ten. Click2Houston reported the contents as sexual, graphic, and later threatening. He described her car. He described how she got in and out of it. He described items she was wearing. Multiple letters said he was going to smoke her. One envelope included a map of where he claimed he lived.
She had not handed him a business card with her legal name. She had not invited correspondence. The record that let a stranger address her correctly still sat in the ordinary places a small business owner has to occupy in order to operate. A storefront. A public listing. A name on the glass or on a search result. A sex offender registry photo later matched the man on her own surveillance video. Houston police booked Brandon Errick Wilson, age sixty, on a felony stalking charge. State records showed a prior conviction for indecency with a child. Bond was set at ten thousand dollars in Harris County.
That is the entire chain. A name that belongs to a working store. A body that walks that store every day. A stranger who already knew enough to write the name correctly and then keep watching.
The structural failure is not a missing lock on the front door. The structural failure is that commercial identity and personal identity occupy the same searchable surface. A small business owner who puts a legal name on a lease, a sales tax permit, a professional profile, a domain contact field, or a storefront search listing has published the same string that people-search products, court indexes, and offender registries already index. The man did not need to break into an account. He needed a name and a place of business. The letters prove he had both.
Click2Houston recorded what happened after the first letter. Officers told her more than once that leaving letters was not a crime. Heather Bellino of the Texas Advocacy Project told the same outlet that Texas stalking enforcement still treats isolated acts as noise even when the pattern is already a threat. The small business owner had to become her own case file. She saved every envelope. She called again. A later officer took the pattern seriously. Arrest followed. Until that point, the store remained the delivery address for a man who had already written about killing her.
Physical consequence arrived before the booking sheet. She increased staffing so she would not be alone at the business. She sent a male friend to the mapped address to tell the man to stop. She spent working days wondering where he was. That is not a privacy inconvenience. That is a change in how a small business owner occupies her own floor because a name-plus-location pair had already been resolved.
The same pair is how most small firms are built. The owner is the brand. The brand is the owner. The phone that takes client calls is the phone that sits on the nightstand. The address that receives inventory is the address that receives the threatening mail. County occupancy permits, Google-style business listings, Secretary of State filings, and payment processor merchant names all repeat the same legal name. A stranger who starts at any one of those nodes can walk the rest without touching a password.
What failed first was the assumption that a storefront is only a commercial address. For a small business owner it is also a predictable schedule. Open hours are published. Delivery windows are visible. Parking is visible. Clothing is visible to anyone who stands on the sidewalk. The letters described those details because the business itself is a daily observation post. Publishing the name next to that post turns observation into a dossier.
What failed second was the belief that police would treat a named, mapped, escalating series of letters as an emergency on letter two. The system waited for a pattern that the victim had to assemble. During that wait the store stayed open because a small business owner cannot close for two weeks while the file matures.
What failed third is the after-state. An arrest does not delete the name from the listings that made the first envelope possible. It does not recall copies of the letters. It does not tell her how he first obtained the legal name. Click2Houston left that origin as she described it, a stranger who somehow knew her full name. That gap is the point. The owner cannot audit every database that already holds the string.
Jessica Rahm later said she hoped the arrest would scare him enough to stop and also feared it would not. That sentence is the correct end state of a public commercial identity that maps to a single human body. The felony charge addresses one man. It does not address the surface that let him address her correctly on day one.
A small business owner who reads this as a Houston-only story is reading the wrong layer. The letters are local. The filing surface is national. Every jurisdiction that requires a legal name on a public business record, and every platform that republishes that name next to a map pin, recreates the same conditions. The difference between a client finding the shop and a stranger writing ten envelopes is motive, not access.
Source for the facts in this piece is Click2Houston, KPRC 2, reporting the Montrose case, the surveillance letters, the map, the staffing change, the registry match, and the Harris County booking of Brandon Errick Wilson.
Every story we publish happened to someone who thought it wouldn't happen to them. That's why we publish them. The RuleDraft Small Business Isolation Manual gives Small Business Owners a proven path to fixing those same problems.