Accounts On The Dark Web
The short version: A ReelMyPodcast report says Flock law enforcement logins were found for sale on a Russian dark web vendor, reportedly lacking basic MFA protections, now drawing Senate attention.
Our Take
Let that sink in: credentials granting access to a nationwide network of license plate cameras — the kind that log your movements, your routines, your life — allegedly showing up for sale on a Russian dark web marketplace. According to the breakdown from ReelMyPodcast, these weren't hobbyist accounts either, but law enforcement logins, and reportedly without multi-factor authentication standing in the way. That's not a hypothetical privacy risk. That's a real door left unlocked on a system that was sold to the public as secure, accountable, and tightly controlled.
This is exactly the failure mode critics of Flock Safety have been warning about for years. A surveillance network is only as trustworthy as its weakest login screen, and when the product is marketed to hundreds of police departments as an off-the-shelf solution, basic security hygiene like mandatory MFA shouldn't be optional or an afterthought. If accounts with access to plate reads, location histories, and investigative data can be bought like stolen Netflix passwords, then every promise about 'audit trails' and 'controlled access' made to city councils and residents starts looking a lot thinner. It's good that senators are reportedly paying attention — this is the kind of story that should force real oversight hearings, not just a corporate statement about 'taking security seriously.'
Credit to ReelMyPodcast for surfacing this. We'll keep tracking what comes of the Senate inquiry. In the meantime, if you want to see how far this camera network already reaches into your own neighborhood, check our camera map, and if you think your local department needs to answer for its Flock contract, our take-action resources can help you get started.
This is DeFlock The USA’s original commentary. The video above is the work of ReelMyPodcast, published on YouTube — full credit to the creator.