Security
Stolen Flock Camera Reveals Extensive Surveillance of Vehicles and Pedestrians
Security researchers who extracted and analyzed a Flock Safety camera have exposed how the device tracks not just license plates, but also people, bicycles, and even bumper stickers.
Ars Technica
Unknown actors physically removed a Flock Safety camera from a roadside location and extracted its internal data, then released the findings to journalists and security researchers. The disclosure offers rare technical insight into the workings of a widely deployed surveillance system that the company has long claimed uses end-to-end encryption to protect sensitive information.
What the Breach Revealed#
The extracted data shows that Flock's cameras perform far broader surveillance than their license-plate-reader label suggests. The device's computer-vision algorithms explicitly identify and log:
- Individual people and pedestrians
- Bicycles in addition to motor vehicles
- License plates from dozens of angles per passing vehicle
- Decorative items such as bumper stickers, patches, and flags
Analysis of several weeks of recovered logs indicates the camera generated over one million images during that period. Investigators found that even minor details—such as an American flag patch on a motorcycle rider's bag—were sometimes isolated and processed by the system.
The Encryption Gap#
Flock has publicly described its storage as protected by on-device encryption, but researchers who accessed the compromised unit were able to recover the encryption key that had been stored on the device itself. With that key in hand, they unlocked video archives containing thousands of vehicle detections. While some of the camera's most sensitive data remained encrypted and inaccessible, the recovered portion was substantial enough to demonstrate the system's tracking scope.
The breach analysis was conducted jointly by 404 Media, WIRED, and the transparency group Distributed Denial of Secrets.
Escalating Pushback and Countermeasures#
The physical removal and analysis of the camera underscores growing resistance to Flock's network across the country. Law enforcement has arrested multiple people for allegedly tampering with or destroying the devices, prompting some municipalities to reconsider their use of the system entirely. In a bid to catch vandals, one police department even constructed a decoy Flock camera from a 3D printer—a move that ultimately backfired when a person was charged with felonies for damaging what they believed was the real equipment.
