Some machines encrypt secondary drives (D:, E:). Use this to pull everything at once:

Get-BitLockerRecoveryInfo -ComputerName "PC-WS001" | Select-Object RecoveryPassword

Marcus must have triggered a key rotation or re-encrypted the drive recently. The newer key was the one he needed. The older one was likely from a previous installation.