October 10, 2026

The mystery of the white box truck and how license plate readers could have saved lives

PERF members,

Twenty-four years ago, the greater Washington, D.C., region experienced one of the most unsettling crime sprees in modern American history. Between October 2 and October 24, 2002, two individuals who came to be known as the Beltway Snipers killed 10 people and critically wounded three others over three weeks of terror. In an after-action assessment requested by the U.S. Department of Justice, PERF explored a key question: how do you stop a killer who crosses in and out of multiple jurisdictions? 

The case was unusual because it did not stay within one police department's jurisdiction. What began in Montgomery County, Maryland, spread to neighboring Prince George's County; Washington, D.C.; and Fairfax County, Prince William County, and Spotsylvania County, Virginia. Because many of the victims had been shot while they were at gas pumps, filling the tank became an act of fear for people up and down the entire East Coast.

Investigators' primary lead for most of those three weeks proved wrong. Witnesses reported a white box truck fleeing several of the shooting scenes, and police stopped nearly every white box truck they could find. But the killers weren't driving a truck at all; they were driving a blue 1990 Chevrolet Caprice, modified with a hole cut into the trunk near the license plate so the shooter could fire from inside without ever being seen. Remarkably, police interacted with the shooters in their car during the murder spree, but let them go, focused instead on locating the reported white box truck. Before investigators finally identified the Caprice, 10 people had been killed over a three-week period.

Yet investigators had received an important clue much earlier in the investigation. On the second day of the shootings, there was a report of a dark four-door Chevy Caprice parked along the 7800 block of Georgia Avenue in Washington, D.C., near the scene of a shooting. With today's automated license plate reader (ALPR) technology, investigators could have identified the one vehicle that appeared at the scene of more than one shooting location and tracked its movements across jurisdictional boundaries. In other words, technology that could quickly link a single vehicle to multiple crime scenes could have given investigators a decisive lead in hours—not weeks—potentially saving many lives.

As you know, that powerful technology exists today in artificial intelligence-powered ALPRs, which capture snapshot photos of license plates and other identifiable parts of vehicles as they pass by the cameras.  Many companies manufacture these systems, which in turn contribute data to a nationwide information-sharing network. These tools can turn open-ended manhunts into solid investigatory leads within minutes.

Case in point: In the December 2025 shooting at Brown University that killed two students, also reviewed by PERF, neither the public nor the police were able to identify the shooter or his car from video footage. The investigation accelerated dramatically, however, after police received two tips describing a small, gray car with Florida license plates. By plugging that limited information into the ALPR database, investigators narrowed a universe of thousands of vehicles in the area to just two within minutes. They ruled out one vehicle and determined the other belonged to the shooter. Regrettably, investigators didn’t have the vehicle tips that led to the ALPR data before the shooter had also taken the life of an MIT professor.

Simply put, what took 22 days and led investigators down the wrong path in the 2002 Beltway Sniper case took minutes to pinpoint accurately in 2025. In active investigations where the lives of innocent people lie in the balance, getting accurate real-time information can literally mean the difference between life and death.

The power of ALPRs to help solve crimes is illustrated by how commonplace they’ve become in communities across the United States. Every police chief and sheriff will tell you that at their most basic level, ALPRs photograph vehicles in public spaces and capture information that drivers are already required to display publicly: their license plate numbers. What once required a person's (often faulty) observation and memory can now be recorded, searched, and analyzed in seconds. The technology itself has actually existed for years and is well established in other countries like England and Japan.

Yet powerful technology inevitably creates opportunities for misuse, especially when it advances and proliferates quickly. With ALPRs, that risk comes down to two questions: Who has access to the data, and how long is it retained? Get those wrong, and a tool built to solve crimes becomes one that can track, stalk, and harass instead. When that happens, public trust in the technology—and in the police generally—erodes.

We have already seen examples of this, including cases in which law enforcement officers improperly accessed license plate data to track ex-spouses and others. These incidents are a reminder that any technology capable of advancing public safety carries with it a responsibility to ensure it is used lawfully, ethically, and with appropriate safeguards.

Long before ALPRs, there were reports of individual officers misusing police databases by improperly running license plates and accessing motor vehicle records without a legitimate law enforcement purpose. In response, law enforcement agencies adopted policies, auditing requirements, and other safeguards to ensure that database searches were conducted only for official business. These safeguards are now standard throughout law enforcement.

This illustrates an important point. The risk of technological misuse did not begin with ALPRs, and it will not end with them. Before new technologies expand law enforcement capabilities, agencies need to establish clear policies, meaningful oversight, and strong consequences for those who abuse technology. We are seeing, in real time, policy and accountability catching up with technology and its potential for misuse.

In Providence, the police department gathered public input and had a robust policy in place before implementing ALPRs. That policy addresses data retention and access, requires audits, and specifies that misuse will subject officers to a range of potential penalties, from administrative sanctions to civil liability to criminal prosecution. 

At one of our recent law enforcement meetings, PERF heard example after example of ALPRs helping solve crimes, including the attempted kidnapping of a toddler from a mall in Fairfax County. Clearly, we should not abandon this valuable technology. But we should not dismiss legitimate privacy concerns either. Those concerns must be addressed through clear policies, transparency, oversight, and accountability. The lesson from both the Beltway Sniper case and the Brown University investigation is clear: When used responsibly, technology can save time, focus scarce resources, and help identify dangerous offenders. The choice is not between public safety and privacy. The challenge is creating safeguards that allow us to protect both.

Best,

Chuck