Theft Patterns In Northern California: What Our Patrol Logs Show

Most crime commentary in our industry recycles national headlines. This is the opposite: patterns we observe directly across Sacramento-region patrol posts, described as field observation rather than statistics. Where you want counts and rates, use the California Department of Justice Open Justice portal and your local agency's crime dashboard. What we can tell you is how these events unfold, which is what actually informs a security plan.

Pattern 1: The pre-dawn window dominates

Across property types, the highest-value events cluster between roughly midnight and 5 a.m., with a secondary spike immediately after the last trade or last employee departs and before coverage begins. That handoff gap — the 60 to 90 minutes between site emptying and patrol starting — is where an outsized share of losses occur.

Countermeasure: overlap coverage with the departure, not with the clock. Starting patrol at 10 p.m. when the site empties at 8 p.m. leaves the two most exposed hours uncovered.

Pattern 2: Reconnaissance precedes the event

Serious property crime is usually preceded by a low-cost probe: a vehicle circling the perimeter, someone walking the fence line in daylight, a gate tested and left alone, a camera examined. The probe often occurs days before the event.

Countermeasure: train officers to log the probe, not just the crime. Our DARs capture plate fragments, times, directions of travel, and vehicle descriptions for non-events. That log is the single most useful document when the event finally happens — and it is what let an officer give police an actionable description in the Citrus Heights arson case.

Pattern 3: Construction losses follow the delivery schedule

Material theft on build sites is not random. It tracks deliveries: copper wire after electrical rough-in, appliances and fixtures near finish, tools and generators throughout, and catalytic converters from any vehicle left overnight.

Countermeasure: align coverage intensity with the delivery calendar. Ask the GC for the schedule and increase presence on the nights following high-value deliveries. This is a scope conversation most vendors never initiate.

Pattern 4: Encampments reform on a cycle

Transient encampments on commercial property follow a predictable rhythm: establishment, growth, cleanup, and reformation at the same location within weeks unless the underlying conditions change. Sweeps without design change reset the clock; they don't end the cycle.

Countermeasure: combine documented, repeated admonishment — which is what makes California trespass enforcement stick — with CPTED fixes: lighting the alcove, removing the concealing landscaping, fencing the setback, closing the water source. Enforcement plus design ends cycles; enforcement alone does not. The approach also matters: our officers handle these contacts with de-escalation and referral, which is exactly why a grocery store manager wrote to commend the team rather than complain about it.

Pattern 5: Retail shrink is two different problems

Owners treat "theft" as one line item. Operationally it's two:

• Daytime shrink — concealment, grab-and-run, and organized crews. Driven by floor coverage, sightlines, and merchant's privilege procedure under Penal Code 490.5(f).
• After-close entry — glass, roll-up doors, roof access. Driven by hardening, lighting, and overnight presence.

Countermeasure: don't buy one service and expect it to solve both. They require different hours, different training, and different post orders.

Pattern 6: Industrial yards lose at the fence line, not the gate

Gates get attention; fence lines don't. Breaches concentrate at the property boundary furthest from the office, adjacent to a road with a shoulder, and screened from the street by vegetation or stacked material.

Countermeasure: map your perimeter for the segment that is simultaneously dark, screened, and vehicle-accessible. That is your breach point. Put a documented check there every patrol pass and get light on it.

Pattern 7: Foothill sites lose more per event

Auburn, Loomis, Lincoln, Colfax, and the surrounding communities see fewer events than the metro but higher per-event losses, driven by longer law enforcement response times and greater isolation. Remote equipment yards and unoccupied build sites are the recurring targets.

Countermeasure: in low-density areas, documented random patrol beats fixed schedule strongly, because a predictable arrival time on an isolated site is an operational gift to whoever is watching.

Pattern 8: Residential and HOA losses cluster at amenities

Garages, mail and package rooms, pool decks, and clubhouse areas account for most multifamily and HOA incident volume. Package theft and vehicle prowling dominate by count; pool-area after-hours use dominates by liability.

Countermeasure: amenity lock-up rounds at defined times, documented, plus lighting and access control on the garage and mail room. This is a low-hour, high-return service and one of the most cost-effective programs we run.

What to do with this

Compare each pattern against your own incident history. Where a pattern matches, the countermeasure is usually a scope change rather than a bigger contract — moving hours to the departure gap, adding fence-line checks, or fixing a light. Where nothing matches, you may not need patrol at all yet, and we'll say so.

We publish what our logs show because the industry's information gap is what lets weak vendors sell invoices. Summit Force Security Group — California PPO #122730, BSIS/DCA licensed — Sacramento, Placer County, Solano County, and the East Bay.