Flock Systems: San Jose police officer fired after using Flock database to track cousin’s domestic violence accuser

Flock Systems: San Jose police officer fired after using Flock database to track cousin’s domestic violence accuser

San Jose Police Officer Fired for Misusing License-Plate Tracking System in Domestic Violence Case

A San Jose police officer was terminated in April 2025 after a yearlong investigation revealed he improperly accessed the department’s automated license-plate reader (ALPR) system to track a woman who had accused his cousin of domestic violence. The incident, disclosed by Police Chief Paul Joseph on Friday, highlights growing concerns over the misuse of surveillance technology by law enforcement.

The officer, who had served for two years, used his personal phone to retrieve the woman’s vehicle location data and shared it with his cousin, enabling the accused abuser to monitor her movements. While the cousin faced no criminal charges in the domestic violence case, the officer’s actions were uncovered in February 2025 when the woman reported the harassment to police. An audit of the Flock Systems ALPR database confirmed the unauthorized access.

Chief Joseph condemned the breach as a "betrayal of public trust," emphasizing that such violations would result in severe consequences, including termination. Though the officer was not criminally charged due to gaps in California law that currently exempt ALPR data from penalties for unauthorized access Joseph has referred the case to the state’s police licensing commission for potential decertification, which could bar the officer from future law enforcement roles.

The incident has intensified scrutiny of ALPR technology, which has proliferated across the Bay Area, with nearly 500 cameras installed in San Jose alone. Civil liberties groups, including the ACLU and Electronic Frontier Foundation (EFF), argue that warrantless access to ALPR data enables abuse, citing cases where officers have used the system to stalk ex-partners or track individuals seeking reproductive healthcare. The EFF, which is suing San Jose over its ALPR program, called the officer’s actions a prime example of why judicial oversight is necessary.

San Jose is also facing a federal lawsuit from the Institute for Justice, representing residents who oppose the city’s warrantless surveillance. The case mirrors broader national concerns, including wrongful detentions due to incorrect plate reads and unauthorized cooperation with immigration authorities.

While Chief Joseph defended ALPR technology as a critical crime-fighting tool crediting it with aiding homicide investigations and other arrests he acknowledged the need for stricter legal safeguards. He has endorsed state legislation to criminalize unauthorized ALPR access and issued a department-wide ban on accessing law enforcement databases from personal devices.

The city has taken steps to limit data retention, reducing the storage period for plate data from one year to 30 days and restricting surveillance near houses of worship, reproductive health clinics, and consulates. However, privacy advocates argue these measures are insufficient without enforceable legal constraints, pointing to past instances where police agencies bypassed vendor-imposed restrictions.

The controversy underscores the ongoing tension between law enforcement’s reliance on surveillance tools and civil liberties concerns, with critics warning that unchecked access to ALPR data risks further misuse.

Source: https://www.mercurynews.com/2026/09/11/san-jose-police-officer-fired-for-abusing-flock-license-plate-reader-database-chief-says/

Flock Systems TPRM report: https://www.rankiteo.com/company/flock-

"id": "flo1789245053",
"linkid": "flock-",
"type": "Vulnerability",
"date": "9/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"
{'affected_entities': [{'customers_affected': '1 (domestic violence victim)',
                        'industry': 'Public Safety',
                        'location': 'San Jose, California, USA',
                        'name': 'San Jose Police Department',
                        'size': 'Large (city police department)',
                        'type': 'Government/Law Enforcement'}],
 'attack_vector': 'Insider Threat',
 'data_breach': {'data_exfiltration': 'Yes (shared with unauthorized party)',
                 'number_of_records_exposed': "1 (individual's plate data)",
                 'personally_identifiable_information': 'Vehicle location tied '
                                                        'to individual',
                 'sensitivity_of_data': "High (used to track individual's "
                                        'movements)',
                 'type_of_data_compromised': 'Vehicle location data'},
 'date_detected': '2025-02',
 'date_publicly_disclosed': '2025-04',
 'date_resolved': '2025-04',
 'description': 'A San Jose police officer was terminated in April 2025 after '
                'a yearlong investigation revealed he improperly accessed the '
                'department’s automated license-plate reader (ALPR) system to '
                'track a woman who had accused his cousin of domestic '
                'violence. The officer used his personal phone to retrieve the '
                'woman’s vehicle location data and shared it with his cousin, '
                'enabling the accused abuser to monitor her movements.',
 'impact': {'brand_reputation_impact': 'Betrayal of public trust, increased '
                                       'scrutiny of law enforcement '
                                       'surveillance practices',
            'data_compromised': 'Vehicle location data',
            'legal_liabilities': 'Federal lawsuit (Institute for Justice), '
                                 'potential state decertification',
            'operational_impact': 'Department-wide policy changes and audits',
            'systems_affected': 'Flock Systems ALPR database'},
 'investigation_status': 'Closed (officer terminated, case referred to '
                         'licensing commission)',
 'lessons_learned': 'Need for stricter legal safeguards on ALPR access, risks '
                    'of insider threats in law enforcement, importance of '
                    'judicial oversight for surveillance technologies, '
                    'vulnerabilities in vendor-imposed restrictions',
 'motivation': 'Personal (assisting family member in domestic dispute)',
 'post_incident_analysis': {'corrective_actions': 'Termination of officer, '
                                                  'policy changes (personal '
                                                  'device ban, reduced data '
                                                  'retention, restricted '
                                                  'surveillance zones), '
                                                  'endorsement of state '
                                                  'legislation, referral to '
                                                  'licensing commission',
                            'root_causes': 'Lack of legal penalties for '
                                           'unauthorized ALPR access, '
                                           'insufficient access controls and '
                                           'monitoring, insider threat enabled '
                                           'by personal device use, gaps in '
                                           'departmental policies'},
 'recommendations': 'Enact state legislation to criminalize unauthorized ALPR '
                    'access, implement stricter access controls and auditing '
                    'for surveillance systems, enforce department-wide bans on '
                    'personal device use for law enforcement databases, reduce '
                    'data retention periods, restrict surveillance near '
                    'sensitive locations, increase transparency and public '
                    'oversight',
 'references': [{'source': 'San Jose Police Department (Chief Paul Joseph)'},
                {'source': 'ACLU'},
                {'source': 'Electronic Frontier Foundation (EFF)'},
                {'source': 'Institute for Justice'}],
 'regulatory_compliance': {'legal_actions': 'Federal lawsuit (Institute for '
                                            'Justice), referral to state '
                                            'police licensing commission',
                           'regulations_violated': 'Potential violation of '
                                                   'California law (gaps in '
                                                   'ALPR data protection), '
                                                   'Fourth Amendment concerns '
                                                   '(warrantless '
                                                   'surveillance)'},
 'response': {'communication_strategy': 'Public disclosure by Police Chief '
                                        'Paul Joseph',
              'containment_measures': 'Audit of ALPR database, termination of '
                                      'officer',
              'enhanced_monitoring': 'Stricter oversight of ALPR access',
              'law_enforcement_notified': 'Internal investigation initiated '
                                          'after victim report',
              'remediation_measures': 'Department-wide ban on accessing law '
                                      'enforcement databases from personal '
                                      'devices, reduced data retention period '
                                      '(30 days), restricted surveillance near '
                                      'sensitive locations'},
 'stakeholder_advisories': 'Civil liberties groups (ACLU, EFF) advocating for '
                           'judicial oversight of ALPR systems; law '
                           'enforcement agencies urged to review internal '
                           'policies',
 'threat_actor': 'San Jose Police Officer',
 'title': 'San Jose Police Officer Misuses License-Plate Tracking System in '
          'Domestic Violence Case',
 'type': 'Unauthorized Access',
 'vulnerability_exploited': 'Lack of access controls and monitoring for ALPR '
                            'system'}
Great! Next, complete checkout for full access to Rankiteo Blog.
Welcome back! You've successfully signed in.
You've successfully subscribed to Rankiteo Blog.
Success! Your account is fully activated, you now have access to all content.
Success! Your billing info has been updated.
Your billing was not updated.