The video above describes a troubling scenario: hackers got their hands on a single Flock Safety license plate reader camera, found encryption keys stored directly on the hardware, and used that access to pull roughly 1.6 million images in just three weeks. Whether or not every detail of that account can be independently verified, the underlying concern is real and worth taking seriously.
Why one camera can expose so much
Automated license plate readers are not simple traffic cameras. They photograph every passing vehicle, timestamp and geolocate the image, and often run that plate through law enforcement databases in real time. A single unit can rack up thousands of reads a day. When that data streams into a shared network like Flock’s, one compromised device is not just a leak of its own footage, it can be a doorway into a much larger pool of driver location history.
The core problem: security as an afterthought
If encryption keys are stored on the device itself, that is a basic security failure, the kind cybersecurity professionals have warned about for years when it comes to internet-connected surveillance hardware. These cameras are often mounted on poles in public, accessible spots, sometimes with minimal physical protection. A system built to track the public should be held to a higher security standard than a doorbell camera, not a lower one.
Why this matters even if you have nothing to hide
ALPR data is not just about catching stolen cars. It builds a detailed record of where you drive, when, and how often, which can reveal where you work, worship, seek medical care, or spend time with family. When that data sits behind weak security, it is vulnerable not only to hackers but to insider misuse, data brokers, and mission creep well beyond the original public safety justification.
What you can do
Start by finding out if ALPR cameras are already watching your street. Our interactive map tracks known camera locations across the country. Learn how the technology and its data-sharing agreements actually work on our learn page, and if you want to push for stronger oversight, retention limits, and security audits in your own community, visit take action for concrete steps.
Vendors like Flock will keep expanding their networks. The public’s job is to demand that expansion comes with real accountability, not just a promise to trust the system.
Independent, ad-free — and reader-funded
No ads, no paywalls, no selling your data. What this costs is server bills and the data services behind the map, the Docket, and the archives — and every dollar readers chip in goes to exactly that: keeping DeFlock The USA up, current, and ad-free.
Support us on PayPal or scan the code, or Venmo @deflocktheusa