Hackers accessed a Flock surveillance camera and extracted thousands of videos and logs, unveiling more than 1.6 million images capturing 50,000 vehicles over three weeks. The unprecedented disclosure exposes the breadth of surveillance data collected and the inner workings of the system.
- Hackers extracted 1.6 million images from a stolen Flock camera
- Devices capture vehicles, license plates, people, and even stickers
- Data accessible by thousands of law enforcement agencies nationwide
What happened
A hacker collective named stegan0gram physically removed a Flock camera and successfully copied its internal storage, including an encryption key that unlocked vast amounts of footage and logs. Analysis of the recovered data revealed the system automatically detects various objects such as vehicles, license plates, bicycles, and individuals. Over 21 days, the camera recorded images of approximately 50,000 vehicles and generated more than 1.6 million images.
Following the breach, the footage and data were shared with transparency-focused organizations and media for investigation. The breach demonstrates vulnerabilities in the camera’s security, despite Flock’s claims of on-device encryption. This attack is part of a broader pattern of opposition to Flock cameras, including arrests of individuals accused of tampering with the devices.
Why it matters
Flock’s cameras are used by many local agencies to monitor traffic and enforce laws, feeding images and license plate data into a shared national database accessible by thousands of authorities. The breach highlights significant privacy risks, as data from local cameras is searchable by a wide network including police, airports, universities, and even federal offices that may not have obvious reasons for access.
The exposure intensifies ongoing public and legal debates over whether communities should allow automatic license plate readers and the extent of surveillance permitted. Past investigations revealed law enforcement misuse, such as sharing data with immigration authorities against local rules or searching for individuals involved in sensitive cases. This incident underscores concerns about the transparency, oversight, and security of such surveillance networks.
What to watch next
Cities and towns might reconsider their contracts with Flock and possibly cease using these cameras amid rising scrutiny and activism against surveillance. Some police departments have employed unusual tactics like deploying decoy cameras to protect against vandalism, but the security flaws revealed may prompt more comprehensive reviews or technical improvements.
Regulators, privacy advocates, and law enforcement agencies will likely intensify discussions around rules guiding data collection, retention, and access. Monitoring how Flock and similar companies respond to security challenges and balance operational transparency with public concerns will be critical. Further investigations may emerge revealing other vulnerabilities or misuse within these national surveillance systems.