Observed Signal · Sep 17, 2026 · Security Research · Source: t3n · Impact: 2/5 · Sentiment: Negative

Flock Safety Hack Reveals Cameras Track People, Not Just Plates

Executive Signal Summary

Hackers from the collective 'stegan0gram' dismantled a Flock Safety ALPR camera in the US, revealing it captures far more than license plates, including images of people, bicycles, and even decals or patches on clothing, which are incorrectly interpreted and stored as plates. Over a 21-day period, one camera captured 1.6 million images and logged 50,000 vehicles, sending data to Flock's cloud for AI-based recognition of plates, make, and color. The hackers also found weak encryption, retrieving a key from an unencrypted area, and storage issues causing crashes. Flock Safety dismissed the act as illegal and pointed to its bug bounty program. The findings, reported by 404 Media and Wired, add to criticism over privacy and potential misuse.

Polaris7 AgentPolaris7 Strategic Assessment
High Confidence

Security vulnerability in surveillance tech relevant to privacy and data protection in adtech-adjacent identity, but not a major industry event.

SIGNAL RADAR

Track 404 Media Signals & Market Shifts in Real-Time

Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your Polaris7 workspace to monitor these entities.

Start Monitoring
Verified primary sourcesAutomated briefingsInstant watchlist setup

Key Takeaways & Evidence Grounding

  • Hackers dismantled a Flock Safety ALPR camera and discovered it stores images of people, bicycles, and can misinterpret stickers/patches as plates.
  • One camera captured 1.6 million images and logged 50,000 vehicles in 21 days.
  • The ALPR system uploads data to Flock's cloud for AI-based recognition of plates, make, and color.
  • Weak encryption allowed hackers to find a key in an unencrypted area.
  • Flock Safety called the hack illegal and directed researchers to its bug-bounty program; findings were reported by 404 Media and Wired.

Ontology Mapping & Concepts

Primary Source Grounding & Direct Attribution
Direct Origin Attribution
Primary Reporting: t3n•Published: Sep 17, 2026
Original Coverage Title: “Flock-Hack zeigt: Überwachungskameras speichern mehr als nur Bilder von Autokennzeichen”

Related Market Signals & Shifts

Recent verified developments and strategic activity across this market segment.

PrivacyOct 15, 2026

Flock CEO Defends Surveillance Tech Amid Backlash

At TechCrunch Disrupt 2026, Flock CEO Garrett Langley defended his company's license plate recognition and surveillance technology against privacy concerns and national backlash. He argued that crime-fighting benefits outweigh risks, stating 'we shouldn't pause progress,' and compared the tech to driverless cars. Langley emphasized that no customer contracts have been terminated, but 'if a customer knowingly broke the law, we would fire them immediately.' He deflected questions about abuse and invasiveness, offering no concrete solutions. Despite protests outside the venue, cancelled contracts, and layoffs, Langley positioned Flock as inevitable, with over 100,000 cameras deployed. He stressed that cities should decide usage, denied plans to sell the company, and addressed competition from Axon.

Read assessment
PrivacyNov 6, 2026

Ten Local Governments Cut Flock Surveillance Camera Contracts

At least ten local governments and police departments have moved since summer to terminate or restrict their use of Flock Safety's surveillance technology, citing privacy concerns, data sharing practices, and procurement issues. Cities including Monroe, Ohio; Newburgh, New York; Richmond, Virginia; and Lansing, Michigan, have ended contracts, while others like League City, Texas, voted against continued use. Misuse incidents, such as officers stalking ex-partners with license plate data, and concerns about federal agency access have fueled the backlash. Flock defends its technology, stating customers own their data and that it does not sell data or contract with ICE. State actions, including Florida's ban on highway readers and Texas's funding pause, reflect growing scrutiny. Flock has responded by reducing default data retention to seven days and requiring case codes for searches. The debate parallels broader resistance to AI and data center expansion, with lawmakers proposing federal restrictions like the Ban Flock Act.

Read assessment
Retail Operations & Surveillance TechnologySep 4, 2026

Ulta's Flock License Plate Readers Spark Online Backlash

Ulta Beauty faces online criticism over its use of Flock Safety's automated license plate reader technology at some store locations. The backlash was amplified by a viral campaign from activist group UltraViolet. Ulta confirmed the technology is deployed at less than 1% of its approximately 1,500 stores and does not use facial recognition. The company uses the readers to combat organized retail crime, a practice that has drawn public scrutiny amid broader concerns about surveillance. Flock has updated its terms and conditions in response to criticism, and some governments are reconsidering the technology. Ulta's director of organized retail crime, Rory Stallard, has publicly praised Flock's technology for helping collaborate with law enforcement. The retailer did not respond to questions about the start of the partnership.

Read assessment
Executive Briefing & Watchlist

Receive all future signals for 404 Media & competitors in your briefing

Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.

Daily primary source scansCurated executive briefingsUnsubscribe anytime