Savannah officer fired for sharing Flock plate-reader login with ICE agent husband

What happened

A Savannah police officer was fired in August after an internal investigation found she gave her credentials for the Flock license plate recognition system to her husband, an agent with U.S. Immigration and Customs Enforcement, according to The Verge.

The former officer, Amber Harpe, shared her login with Tyler Harpe, who then used it to query the department's plate-reader data. The Savannah Police Department said it does not share its Flock data with ICE at all, and that handing over system access violated the department's security protocols.

Nearly a thousand unauthorized searches

While he held the unauthorized access, Tyler Harpe ran 983 searches tied to 97 distinct license plates, and an overwhelming share of those plates were registered to Hispanic drivers, according to WJCL, Savannah's local ABC affiliate.

The couple defended the activity, arguing that the credentials were not used for anything personal and that the queries served strictly "law-enforcement purposes." That argument did not persuade the department's senior leadership.

Split over discipline

The case also exposed disagreement inside the department about how seriously to treat the breach. Interim Major Max Nowinsky originally recommended a suspension of just eight hours. Major Michelle Halford and Assistant Police Chief Robert Gavin disagreed with that penalty, and Harpe was ultimately removed from the force.

Harpe was not the only employee caught up in the fallout. According to The Verge, she was dismissed alongside five other Savannah police employees after the internal investigation uncovered misuse of Flock. Four of those employees were later arrested, though Harpe was not among them.

Why it matters

The incident is small in scale — one officer, one shared password — but it illustrates structural problems in how police surveillance data is governed.

The first problem is that credential sharing quietly defeats the access controls systems like Flock depend on. Individual accounts exist so every query can be attributed to a specific, authorized person and audited later. Once credentials are handed to someone else, especially someone outside the agency entirely, that chain of accountability breaks, and nothing in the system itself stops it. Here the misuse appears to have surfaced through an internal investigation rather than any technical safeguard.

The second is that formal data-sharing boundaries between local police and federal immigration authorities can erode informally. Savannah's stated policy is that it does not share Flock data with ICE, yet a personal relationship produced a data pipeline the policy never authorized, resulting in nearly a thousand queries.

Third, the pattern of the searches raises clear civil-liberties concerns. Whatever the sincerity of the couple's "law-enforcement purposes" claim, queries that overwhelmingly targeted Hispanic-registered drivers show how readily plate-recognition systems can be used for profiling once access is obtained, and how little friction stands in the way.

Finally, the initial recommendation of an eight-hour suspension suggests that even a flagrant security violation may be treated lightly absent intervention from senior leadership. For the many cities deploying plate-recognition networks, the episode is a reminder that written data-sharing policies are only as strong as the authentication, auditing and disciplinary culture behind them.