Savannah Officer Fired Over Flock Login She Gave ICE Husband

Update, Oct. 19: Since publication, Flock itself has moved: CEO Garrett Langley announced this week that the company's Audit Assistance tool — the same anomaly-flagging tool whose alerts surfaced Harpe's 983 searches — will become mandatory for customers by the end of the year; only about a third have adopted it so far. The company also said it fixed a December 2025 incident in which some AI-powered pan-tilt-zoom cameras were publicly accessible, which Langley blamed on a vendor's network-configuration error. Civil-rights advocates are unimpressed: Tom Bowman, policy counsel at the Center for Democracy & Technology, called it "the same 'Just Trust Us' policy with a fresh coat of paint." Separately, The Washington Post reported last week that at least 50 officers nationwide have been accused, charged or convicted of using Flock or other license-plate readers to spy on people — Savannah is one data point in a national pattern.

By Maya Torres | October 19, 2026

Amber Harpe didn't hand her husband the keys to a squad car. She handed him something with far more reach: her username and password for Flock Safety, the license-plate surveillance network her department plugs into. Between January and July, Tyler Harpe — a federal ICE agent with no Flock account of his own — ran 983 searches across six states while logged in as his wife, and WJCL's review of the records found the plates overwhelmingly belonged to Hispanic drivers. In August, the Savannah Police Department fired her for it.

That's the whole scandal, and it is remarkable how ordinary its ingredients are. No hack. No backdoor. Just one shared password — and a system that, for seven months, logged every search under the wrong person's name.

A Flock Safety license-plate camera mounted on a pole (file photo; not the Savannah unit). Savannah PD shares its Flock data with more than 1,700 agencies — but not with ICE. Photo: Epicdeflocker6 via Wikimedia Commons (CC0)

How one routine audit found 983 searches under a single login

The case surfaced the boring way: an internal audit. Flock offers departments an "Audit Assist" tool that flags unusual query activity, and Amber Harpe's account set it off. Between January and July 2026, investigators counted 983 search entries covering 97 license plates across Georgia, New Jersey, Maryland, Florida, South Carolina, and North Carolina. South Carolina alone accounted for 788 of those searches, and WJCL's review of the records found that most of the registered owners tied to that group were Hispanic — the reporting that first broke the story.

In a July 27 interview, Amber Harpe told investigators she didn't recognize many of the names on the list and that her husband had run most of the searches. She acknowledged sharing her login with Tyler Harpe — and admitted she had understood it was not permitted. Her own use of the program, she said, was rare: mostly missing-person cases involving behavioral-health patients.

That detail matters, because it demolishes the one defense that might have worked. She wasn't fooled, and she wasn't coerced. She knew the rule, and she broke it — for someone she believed was doing legitimate police work. Which is precisely what makes the next part of the story interesting: the department couldn't agree on what her punishment should be.

Eight-hour suspension? Her bosses said no — termination instead

Interim Major Max Nowinsky sustained the allegation but recommended an eight-hour suspension — one day. His reasoning: investigators found no evidence the searches were done for personal reasons or gain, and Amber Harpe had a clean disciplinary record since joining the Savannah Police Department in 2020, Police1 reported.

Major Michelle Halford overruled that and recommended termination, citing the intentional sharing of credentials, the recurring unauthorized access, and the sheer scale of the activity. Assistant Police Chief Robert Gavin agreed, writing in the disciplinary records that state law allowing agencies to share plate data for legitimate purposes did not allow Harpe to share her personal login. His point was brutally practical: because every search was logged under her account, the audit trail identified her — not her husband — as the user. The records were, for seven months, fiction.

The police chief's office sided with the termination recommendation on August 13. Amber Harpe appealed. Assistant Police Chief Robert Gavin denied the appeal that same month, and she was out.

That split — one-day suspension versus losing the job — is the whole argument in miniature. To Nowinsky, the offense was technical and the intent was clean. To Halford and Gavin, the intent was irrelevant: 983 unauthenticated searches had corrupted the one thing an audit system needs to be true. The record of who looked at whom.

A Flock Safety camera on a roadside pole (file photo). Investigators found ICE was not among the agencies Savannah shares its data with. Photo: Epicdeflocker6 via Wikimedia Commons (CC0)

"Every name that I ever ran was an ICE target"

The Harpes did not deny any of it. In an August 3 interview, audio of which WJCL obtained, Tyler Harpe explained why he asked for the credentials: "I asked her if I could have her Flock login, and she asked what I was going to be using it for," he said. "And I told her that once we had already developed target packages for people that were, had arrest warrants, it would be easier while we're out on the street to be able to locate them."

"Every name that I ever ran was an ICE target," he told investigators, adding that every search was for a person with an active arrest warrant.

When an investigator expressed surprise that ICE — one of the largest federal law-enforcement agencies on earth — had no Flock access of its own, Amber Harpe answered with the line that has now been quoted in every national version of this story: "No one really wants to work with them, sir."

There it is: the human texture of a disciplinary interview, dry politeness intact. And she's not wrong about the access part. Records WJCL obtained show the department shares its Flock data with more than 1,700 agencies. ICE is not on the list. Tyler Harpe estimated he used the account for about four months during the January–July window, according to the audit.

In her appeal, Amber Harpe wrote: "Every search he conducted was for law enforcement use only and not for personal gain." She added, in the same filing: "The violation occurred because I gave my husband, who is a certified law enforcement officer with the Department of Homeland Security, access to my Flock account." The argument, in other words: the badge should travel with the person, not the login. The department's answer: it doesn't.

Not a crime in Georgia — still a firing offense in Savannah

Here's the twist that keeps this story out of a courtroom. Investigators did not find that Amber Harpe violated Georgia's license-plate-reader law. The statute counts federal agencies as law enforcement and permits plate-data sharing between agencies for law enforcement purposes. The Georgia Bureau of Investigation reviewed the case and filed no criminal charges.

She was fired under department policy — unauthorized access to city and police software — which is a narrower, more punishing standard. The distinction is worth sitting with: what the state legislature permits in the abstract (agencies sharing data) and what a department permits in practice (whose fingers touch the keyboard) are two different questions, and the department's answer was final.

In a joint statement to WJCL, the mayor's office and the Savannah Police Department said: "Unauthorized access to police technology by anyone is a breach of Savannah Police Department policy and public trust. In this case, SPD determined that department policy was violated and terminated the employee. An outside law enforcement agency's investigative purpose does not, by itself, authorize access to SPD's system."

ICE, for its part, confirmed it is investigating its own agent's involvement, according to WTOC. No outcome has been made public.

Six fired, four arrested: the wider Flock audit

Amber Harpe was not the only casualty. She was one of six Savannah Police Department employees fired in August after audits that included Flock's Audit Assist tool. Four of the others were arrested — accused, unlike Harpe, of running searches for personal reasons. Harpe was not arrested. Her searches, everyone agrees, were for work. Just not her work.

The contrast is instructive, and it explains why the department landed where it did. The four arrested officers allegedly used the system for themselves; Harpe used it for her husband's job. Different motives, same failure mode: a surveillance network whose security model is, at bottom, a username and a password and an honor system. We've seen this movie before on this blog — after hackers tore down a Flock camera and one officer's credentials ended up on a personal device, the pattern is getting hard to miss.

The honor system holding up America's license-plate network

Let's be blunt about what this case proves. America's automated license-plate-reader network — thousands of cameras, billions of reads, more than 1,700 agencies sharing one department's feed — is secured, in practice, by the hope that every officer keeps their password to themselves. Flock's audit tooling caught this one, eventually, after seven months and 983 searches. Detection arrived as an audit finding, not as a control: nothing in the system stopped a second human being from typing a borrowed password in January, or February, or June.

The department's defenders will say the policy worked — she was fired, the audit trail (however fictional) still led back to her account, and the misuse was discovered. The privacy advocates will say the audit trail is the entire point: a system that cannot tell who is actually querying it cannot promise anyone anything about how their movements are tracked. Both are right, which is why the story stings. The technology scales like infrastructure; the accountability scales like a Post-it note with a password on it.

We checked the disciplinary-document summaries across the national carriers — WJCL's original reporting, Police1's write-up, Tickle The Wire's version — and the quotes match verbatim in every retelling, which is more than you can say for most viral stories. What none of them can tell you is the question that matters: how many other shared passwords are sitting in other departments' audit logs right now, undiscovered because the account activity looks normal? The Savannah audit only fired because the volume was absurd. A quieter borrower — fifty searches, a hundred — would never have tripped a thing.

Flock–ICE case FAQ: your questions, answered

Who is Amber Harpe?
Amber Harpe is a former Savannah, Georgia police officer, hired in 2020 with a clean disciplinary record, who was fired in August 2026 after investigators confirmed she shared her department-issued Flock Safety login with her husband.

Who is Tyler Harpe?
Tyler Harpe is her husband, identified in investigative records as a federal ICE (Immigration and Customs Enforcement) agent. He had no Flock account through the Department of Homeland Security and used his wife's credentials for roughly four months between January and July 2026.

What is Flock Safety?
Flock Safety is a US company whose automated license-plate-reader cameras feed searchable databases used by thousands of police departments, businesses, and homeowner associations. Savannah PD shares its Flock data with more than 1,700 agencies — but not with ICE.

Was Amber Harpe criminally charged?
No. The Georgia Bureau of Investigation reviewed the case and filed no charges; investigators found no violation of Georgia's license-plate-reader law. She was fired under Savannah PD policy against unauthorized access to police software.

Is Tyler Harpe facing consequences?
ICE confirmed it is investigating its agent's involvement, according to WTOC. No outcome has been made public.

Sources: WJCL (Savannah ABC affiliate, original records reporting); Police1 (Oct 16, 2026, disciplinary documents); Tickle The Wire (Steve Neavling); WTOC (ICE investigation); secondary national coverage via The Verge (not directly reachable at write time — facts attributed to the carriers above).

Maya Torres covers surveillance and privacy for TechPulse USA.