Sumter Detective Charged With Misusing Police Databases and Flock Cameras

A Sumter County Sheriff's Office detective was arrested July 23 and charged with official misconduct and multiple counts of offenses against computer users, after an internal audit found she allegedly accessed restricted law enforcement databases to gather information about her husband's ex-wife.

Detective Brandy Almany, who had been with the agency since 2019, was terminated upon her arrest. She is presumed innocent unless and until proven guilty in court.

The case prompted a response beyond the individual charges. Sheriff Patrick Breeden suspended the agency's use of the Flock automated license plate recognition system following the investigation, an unusual step for a technology that has become widely deployed across Florida law enforcement.

What the audit found

According to the sheriff's office, an internal audit revealed access to several restricted systems. Those included the Flock automated license plate recognition network, the Florida Driver and Vehicle Information Database known as DAVID, and the Comprehensive Case Information System, a statewide court records platform.

Investigators allege that Almany created fabricated electronic records, using unrelated case numbers to make personal searches appear to be legitimate police investigations. That allegation is the element that elevates the case beyond a policy violation, because it describes an affirmative effort to defeat the audit controls that govern database access.

The agency has said it is awaiting additional audit results from the various databases, which could produce further charges. Database audit trails typically record the querying user, the timestamp, the search terms, and the stated case justification, which means a retrospective review can reconstruct access patterns in detail.

Official misconduct under Florida law addresses a public servant who, with corrupt intent, falsifies or causes another to falsify an official record or document. Offenses against computer users cover unauthorized access to computer systems and data.

What these systems contain

The three databases at issue hold different categories of information, and together they provide substantial visibility into an individual's life.

DAVID contains driver license and vehicle registration records, including photographs, addresses, dates of birth, physical descriptions, and vehicle information. Access is restricted to authorized users for legitimate law enforcement purposes, and Florida agencies are required to conduct periodic audits of DAVID access precisely because the system has been misused in past cases across the state.

The Comprehensive Case Information System aggregates court records from Florida's clerks of court, providing access to case filings across jurisdictions.

Flock is different in kind. Automated license plate recognition cameras photograph passing vehicles, read the plates, and log the location and time. A network of such cameras produces a searchable record of where a vehicle has traveled. A user with access can query a plate and retrieve a movement history.

The combination is what makes the alleged conduct significant. Vehicle registration data identifies a person's car, and the camera network then reveals where that car has been.

Why the sheriff suspended Flock

Suspending an operational technology after a single employee's alleged misuse is a substantial decision. Automated license plate recognition has become a routine investigative tool for Florida agencies, used in stolen vehicle recovery, missing person cases, and violent crime investigations.

The suspension suggests the agency concluded that its access controls and audit procedures were insufficient to detect misuse in real time. An audit that identifies improper access after the fact is a valuable accountability mechanism, but it does not prevent the harm.

License plate recognition networks have drawn scrutiny nationally from civil liberties organizations, which have raised concerns about retention periods, the breadth of agency access, data sharing between jurisdictions, and the potential for exactly this category of misuse: an officer using surveillance infrastructure for personal purposes.

Law enforcement agencies have generally responded that the systems produce investigative value and that policy controls address the risk. A case in which controls were allegedly defeated through fabricated case numbers tests that response directly.

A recurring problem in Florida law enforcement

Database misuse cases have surfaced periodically across Florida agencies. The pattern is consistent enough to be recognizable: an officer with legitimate system access uses it for a personal reason, often involving a domestic relationship, a former partner, or a family dispute.

The recurrence is why Florida requires agencies to conduct DAVID audits and why the state maintains logging on these systems. Audit requirements exist because the risk is understood and documented.

What varies between cases is detection. Some misuse is identified through routine audits, some through complaints from the person searched, and some through investigations that begin for unrelated reasons. In this case, the sheriff's office has described an internal audit as the source.

Agencies that identify and charge their own personnel generally treat that as evidence their oversight functions work. The counterargument is that detection after the fact means the information was already obtained.

The Sumter County context

Sumter County sits in Central Florida and is best known as the home of The Villages, one of the largest age-restricted communities in the United States. The county's population has grown substantially with that development.

The sheriff's office serves a jurisdiction whose demographics differ from most Florida counties, with an older population and a policing profile shaped accordingly. Agencies serving communities like this often deploy technology including camera networks at community access points.

The suspension of the Flock program therefore has practical consequences for the agency's operations, removing a tool from active use while the sheriff's office reviews its controls.

Where the case goes

The charges will be prosecuted through the State Attorney's Office for the judicial circuit covering Sumter County. A defendant charged with official misconduct and computer offenses proceeds through arraignment, discovery, and pretrial motions before any trial or plea.

The pending additional audit results introduce the possibility of further charges, which would typically be brought through a superseding information or a new charging document.

Cases involving law enforcement defendants sometimes present recusal or conflict questions, since the investigating agency and the prosecuting office work together routinely. Prosecutors handle this through internal screening or, in some circumstances, referral to another office.

What this means for Floridians

The practical significance for residents extends beyond this single case. Florida residents' driver license photographs, addresses, and vehicle records sit in a system accessible to thousands of authorized users across the state, and increasingly their vehicle movements are logged by camera networks.

Florida law provides remedies for individuals whose records have been improperly accessed, including under the federal Driver's Privacy Protection Act, which creates civil liability for improper disclosure of motor vehicle record information.

Individuals who believe their records have been improperly accessed can request audit information from the agency that maintains the system, though procedures vary. Complaints about officer conduct go to the agency's internal affairs division and, for certification matters, to the Florida Department of Law Enforcement's Criminal Justice Standards and Training Commission, which can revoke an officer's certification.

How license plate reader networks operate

Automated license plate recognition systems consist of fixed or mobile cameras that photograph passing vehicles, software that extracts the plate characters from the image, and a database that stores the read along with the time and location.

The significant characteristic is that the system captures every vehicle, not only vehicles of investigative interest. A camera does not distinguish between a stolen car and a commuter, and the database accumulates location records for the general driving public as a byproduct of scanning for specific plates.

Networks operate across jurisdictions. Agencies that deploy compatible systems can frequently query reads collected by other participating agencies, which extends the geographic reach of a single query well beyond the deploying agency's boundaries.

Retention periods vary by agency policy and, in some states, by statute. A system that retains reads for 30 days supports different capabilities than one retaining them for a year, and the retention decision determines whether historical movement reconstruction is possible.

Access controls typically require a user to enter a case number or a stated reason before running a query, which creates the audit record that agencies review. The allegation in this case is that those controls were defeated by entering unrelated case numbers.

Florida's DAVID audit requirements

The Florida Driver and Vehicle Information Database operates under a memorandum of understanding between the Department of Highway Safety and Motor Vehicles and each agency granted access. That agreement imposes obligations that go beyond general data security practice.

Agencies must designate a point of contact responsible for DAVID compliance, conduct quarterly audits of user access, and report misuse when it is identified. Users must complete training and acknowledge the permitted purposes for access.

The audit requirement exists because DAVID misuse has a documented history in Florida. Cases across multiple agencies over the years have involved officers looking up former partners, acquaintances, celebrities, and individuals encountered in personal disputes.

The federal Driver's Privacy Protection Act provides a civil remedy, and Florida litigation under that statute has produced judgments against individual officers and, in some circumstances, employing agencies. Damages under the statute can be substantial when access occurred repeatedly.

Where oversight goes from here

Cases of this kind typically produce agency-level responses beyond the individual prosecution. Reviews commonly address whether access permissions were appropriately scoped, whether audit frequency was adequate, and whether the justification fields users complete are verified against actual case activity.

Verification is the technically difficult part. Requiring a case number is straightforward; confirming that the queried subject has a genuine connection to that case requires cross-referencing systems that were not designed to communicate with each other.

Some agencies have adopted automated anomaly detection, flagging patterns such as repeated queries on a single individual, queries outside an assigned unit's caseload, or activity at unusual hours. Those approaches shift detection closer to real time.

The Sumter County response, suspending the camera program entirely rather than adjusting controls incrementally, indicates a judgment that the existing safeguards were not adequate to the risk. Whether other Florida agencies review their own controls in response is the broader question the case raises.

What's next

The sheriff's office has said additional audit results are pending, which is the immediate development to watch. Those results will determine whether the charges expand.

The status of the Flock program is the second question. Whether the agency restores the system, and under what revised controls, will indicate what conclusions the review reached about the adequacy of its safeguards.

The criminal case itself will proceed on the ordinary timeline for felony prosecutions in Florida circuit court, with the schedule reflected in publicly available court records.