A fired police officer, a marriage to an ICE agent, and a shared login to one of America's fastest-growing surveillance networks: the Savannah case is a small scandal that illuminates a large vulnerability in how law enforcement deploys AI-assisted monitoring tools.
Amber Harpe, formerly of the Savannah Police Department, was terminated in August after an internal investigation found she had provided her credentials to Flock Safety's automated license plate reader system to her husband Tyler Harpe, an Immigration and Customs Enforcement agent. SPD does not share its Flock data with ICE. The workaround was elegant in its simplicity and damning in its implications.
The Flock phenomenon
Flock Safety has become the quiet giant of American surveillance infrastructure. The Atlanta-based company now operates in thousands of jurisdictions, its solar-powered cameras capturing license plates and feeding them into a searchable database that can reconstruct vehicle movements across time and geography. The pitch to police departments is irresistible: low cost, easy installation, AI-powered alerts. The pitch to civil libertarians is rather less appealing.
The technology works. Flock claims its system has helped solve murders, recover stolen vehicles, and locate missing persons. What the Savannah incident reveals is that the human layer atop this AI infrastructure remains laughably penetrable. A single compromised credential can transform a local policing tool into a federal immigration enforcement asset—without any policy change, court order, or public debate.
Immigration enforcement by back door
The Harpe case arrives amid intensifying battles over sanctuary policies and the extent to which local law enforcement should cooperate with ICE. Cities like Savannah make deliberate choices about data sharing; those choices are meaningless if individual officers can simply hand over access to federal agents at the dinner table.
ICE has not commented on whether Tyler Harpe actually queried the system or what he might have done with any information obtained. The agency's silence is itself instructive. The question of whether this was an isolated lapse or a pattern—whether similar informal arrangements exist elsewhere—remains unanswered and, given current oversight mechanisms, largely unanswerable.
Our take
Flock and its competitors have built genuinely powerful tools. The problem is that power without commensurate access control is just a vulnerability waiting to be exploited. The Savannah breach was discovered; how many others have not been? When AI systems can track the movements of millions of vehicles, the security model cannot rely on the assumption that every credentialed user will honor policy boundaries. The technology has outpaced the governance, and until that gap closes, every Flock database is one compromised marriage away from becoming something its community never consented to.
