LP FIELD INTELLIGENCE
Issue 02 · Week of September 28, 2026

LP Field
Intelligence

Verified developments for frontline retail asset protection and loss prevention officers.

Lead · Organized retail crime

Georgia indictment illustrates the value of linked reports

What changed: Georgia’s attorney general announced Sept. 24 that four people were indicted in Cobb County over an alleged series of retail thefts spanning six counties from February 2024 to July 2026 and totaling more than $23,000. The indictment was returned Sept. 10. An indictment is an allegation, not a finding of guilt.

Why it matters: A single store report would not reveal the whole alleged series. Preserve exact times, item and value details, transaction references, vehicle and associate observations, and case numbers. Separate what video shows from an inference of coordination.

Watch / act: Link potentially related incidents through approved investigative channels; retain original evidence and its provenance.

Limit: The underlying case files and independent loss accounting were not available. A local news report repeats the state’s account, not an independent third verification of the allegations.

Source Desk · Sept. 10 indictment / Sept. 24 announcement: Georgia attorney general · official release index · WSB report.

Investigations · Repeat incidents

Portland operation underscores case linkage

What changed: Portland police reported Sept. 22 that a Sept. 18 retail-theft operation at Jantzen Beach resulted in 13 arrests, recovery of $2,261 in merchandise and one stolen vehicle. Police also reported that a coordinated investigation of one suspect closed more than 81 open cases representing $3,222 in merchandise. Reported charges are not convictions.

Why it matters: Consistent identifiers can make a series visible across separate reports. The release does not independently prove every underlying incident or a regional trend.

Watch / act: Preserve original video, receipts and exact event times. Treat a visual resemblance as a lead, not an identification.

Source Desk · Sept. 18 event / Sept. 22 release: Portland Police Bureau · contemporaneous report. Numbers originate with police; no independent case-level audit located.

KC Metro Watch · Kansas

Gift-card mail theft plea in Johnson County

What changed: Federal prosecutors said Sept. 23 that an Olathe postal employee pleaded guilty to one count of theft or receipt of stolen mail. Investigators reported finding 141 gift cards and other materials during March searches. Sentencing is scheduled for January 2027; no sentence has been imposed.

Why it matters: This is a mail-custody case, not evidence of theft from a retail rack or register. Gift-card investigations should distinguish activation, fulfillment and delivery stages before attributing a loss.

Watch / act: Where authorized, preserve transaction and activation identifiers, shipping records and customer-reported dates; refer postal-custody concerns through appropriate channels.

Source Desk · Sept. 23 plea: U.S. Attorney, District of Kansas · Johnson County Post · KCTV5. Local reports largely cite federal records.

Missouri Watch

No new Missouri retail-policy item promoted

A review of Missouri attorney general and Western District of Missouri release listings did not identify a new retail-loss-prevention law or policy development suitable for this issue. This limited editorial finding does not mean no incidents occurred. The prior issue carries the Missouri legal baseline; confirm current law and local procedure before acting.

Source Desk · reviewed Sept. 28: Missouri attorney general releases · Western District of Missouri releases.

Technology & Evidence

Keep the original while building the link

The reported multi-incident investigations suggest a disciplined workflow: make a working export for comparison while retaining native video, timestamps and transaction records under your retention rules. Document exports, annotations and handoffs. A candidate match is a lead until separately verified.

Limit: This is editorial practice guidance inferred from the investigations, not a newly announced law or employer policy.

Source Desk · Sept. 22–24: Portland police · Georgia attorney general.

Tools of the Trade · Field review

Test a video export before the original ages out

The tool: Your existing CCTV export function. This is a workflow review, not an endorsement of a camera brand or a claim that every system offers the same settings. NIST's CCTV exchange work emphasizes interoperable video and time metadata. SWGDE's acquisition guidance notes that native or proprietary exports can retain valuable information; a separate player or codec may be needed.

Five-minute field check: With an authorized, non-sensitive test clip, (1) note the camera and export time range; (2) save the native or highest-fidelity export and any required player; (3) open the exported file on an approved second device and confirm picture, duration and playback; (4) compare displayed time with a trusted clock and document any offset; (5) record the filename, storage location and handoff. Keep a working MP4 or still frame separately if needed for ordinary viewing, clearly labeled as a derivative.

What to watch: Cropped beginnings or endings, missing cameras, silent conversion to lower quality, time overlays that differ from embedded time, and a player that works only on the export station. Escalate a failed test before retention expires; do not alter the original to make it play.

Limit: NIST and SWGDE describe technical best practices, not a requirement that every LP officer perform forensic analysis. Follow your employer's retention, access and evidence procedures.

Source Desk · standing technical guidance, checked Sept. 28: NIST Digital Video Exchange Standards · NIST CCTV export profile · SWGDE DVR acquisition guidance · SWGDE forensic video analysis guidance.

Officer’s Briefing

Five actions worth carrying into the week

  1. Link related reports with case numbers, exact times and observed identifiers.
  2. Separate direct observation from assumptions about identity or coordination.
  3. Preserve original evidence and metadata before creating working copies.
  4. Confirm sharing authority and recipient identity before distributing case material.
  5. Escalate meaningful patterns through approved channels.
Editorial desk

Verification, photographs and corrections

Consequential claims receive three credible checks when reasonably possible. Where secondary coverage repeats one official source, that limitation is disclosed above. No photograph was needed to explain these stories. Send corrections, source leads or an image you have permission to share to editor@lpfieldintel.com, with creator and usage credit. Do not send restricted case information or original evidence without confirmed authority. This is an informational briefing, not legal advice or employer policy.

Archive: Issue 01 · Sept. 21 · Issue 01 PDF · Issue 02 PDF
Email edition

Get the brief in your inbox

Confirm your address using the signup message; unsubscribe anytime.