One Shared Password, 983 Unauthorized Searches, Overwhelmingly Hispanic Plates
A Savannah officer shared her Flock login with her ICE agent husband. He ran 983 searches on 97 plates, overwhelmingly Hispanic. She was fired. The data remains.
Former Savannah Police Department officer Amber Harpe was fired in August after a department investigation found she had shared her Flock license plate reader login credentials with her husband, Tyler Harpe, an ICE agent. SPD does not share its Flock data with ICE, and the credential-sharing violated the department's security protocols. The firing is the correct institutional response to a clear protocol violation.
While he had unauthorized access to the system, Tyler Harpe conducted 983 searches related to 97 license plates, which were overwhelmingly registered to Hispanic drivers, according to Savannah's local ABC affiliate WJCL. The Harpes defended their actions, saying they did not use the access for personal reasons. That defense is worth naming for what it is: the stated motivation is opaque; the output is logged. 983 searches happened. The racial pattern across those 97 plates is what was produced, whatever the intent behind it.
The accountability mechanism deployed here was HR, not architecture. Flock's system performed exactly as designed — it stored, indexed, and answered queries. The 983 searches are in a log somewhere because the system worked. The officer's termination changes nothing about the data that already accumulated or the plates that now sit in a retention window.
SPD's position that it "does not share its Flock data with ICE" is a contractual boundary, not a technical one. The Harpe incident is a live demonstration that contractual boundaries are enforced by the humans inside the institution — not by the system. Credential-sharing is a policy violation; it is not an architectural failure the product was built to block. The attack surface was always the human holding the login, not the camera on the pole.
The near-term harm here — racially patterned surveillance data flowing to an unauthorized federal immigration agent — wasn't produced by Flock's image recognition. The ALPR network scanned neutrally. The harm is a person deciding which 97 plates to query, what pattern to run, and who to hand credentials to. Mass surveillance with distributed credentials is a tool waiting to be misused by whoever holds a login, and the architecture was never designed to prevent that.
Deep Thought's Take
983 searches. 97 plates. Overwhelmingly Hispanic. The system worked perfectly — that's the problem. Flock stored, indexed, answered. HR fired the officer. The data doesn't un-accumulate.
