Observed Signal · Sep 17, 2026 · Security Research · Source: t3n · Impact: 2/5 · Sentiment: Negative
Flock Safety Hack Reveals Cameras Track People, Not Just Plates
Hackers from the collective 'stegan0gram' dismantled a Flock Safety ALPR camera in the US, revealing it captures far more than license plates, including images of people, bicycles, and even decals or patches on clothing, which are incorrectly interpreted and stored as plates. Over a 21-day period, one camera captured 1.6 million images and logged 50,000 vehicles, sending data to Flock's cloud for AI-based recognition of plates, make, and color. The hackers also found weak encryption, retrieving a key from an unencrypted area, and storage issues causing crashes. Flock Safety dismissed the act as illegal and pointed to its bug bounty program. The findings, reported by 404 Media and Wired, add to criticism over privacy and potential misuse.
Security vulnerability in surveillance tech relevant to privacy and data protection in adtech-adjacent identity, but not a major industry event.
Track 404 Media Signals & Market Shifts in Real-Time
Polaris7 autonomous intelligence agents track regulatory filings, primary sources, executive changes, and deal flow 24/7. Create your Polaris7 workspace to monitor these entities.
Key Takeaways & Evidence Grounding
- Hackers dismantled a Flock Safety ALPR camera and discovered it stores images of people, bicycles, and can misinterpret stickers/patches as plates.
- One camera captured 1.6 million images and logged 50,000 vehicles in 21 days.
- The ALPR system uploads data to Flock's cloud for AI-based recognition of plates, make, and color.
- Weak encryption allowed hackers to find a key in an unencrypted area.
- Flock Safety called the hack illegal and directed researchers to its bug-bounty program; findings were reported by 404 Media and Wired.
Connected Companies & Entities
Ontology Mapping & Concepts
Related Market Signals & Shifts
Recent verified developments and strategic activity across this market segment.
Flock CEO Defends Surveillance Tech Amid Backlash
At TechCrunch Disrupt 2026, Flock CEO Garrett Langley defended his company's license plate recognition and surveillance technology against privacy concerns and national backlash. He argued that crime-fighting benefits outweigh risks, stating 'we shouldn't pause progress,' and compared the tech to driverless cars. Langley emphasized that no customer contracts have been terminated, but 'if a customer knowingly broke the law, we would fire them immediately.' He deflected questions about abuse and invasiveness, offering no concrete solutions. Despite protests outside the venue, cancelled contracts, and layoffs, Langley positioned Flock as inevitable, with over 100,000 cameras deployed. He stressed that cities should decide usage, denied plans to sell the company, and addressed competition from Axon.
Ten Local Governments Cut Flock Surveillance Camera Contracts
At least ten local governments and police departments have moved since summer to terminate or restrict their use of Flock Safety's surveillance technology, citing privacy concerns, data sharing practices, and procurement issues. Cities including Monroe, Ohio; Newburgh, New York; Richmond, Virginia; and Lansing, Michigan, have ended contracts, while others like League City, Texas, voted against continued use. Misuse incidents, such as officers stalking ex-partners with license plate data, and concerns about federal agency access have fueled the backlash. Flock defends its technology, stating customers own their data and that it does not sell data or contract with ICE. State actions, including Florida's ban on highway readers and Texas's funding pause, reflect growing scrutiny. Flock has responded by reducing default data retention to seven days and requiring case codes for searches. The debate parallels broader resistance to AI and data center expansion, with lawmakers proposing federal restrictions like the Ban Flock Act.
Ulta's Flock License Plate Readers Spark Online Backlash
Ulta Beauty faces online criticism over its use of Flock Safety's automated license plate reader technology at some store locations. The backlash was amplified by a viral campaign from activist group UltraViolet. Ulta confirmed the technology is deployed at less than 1% of its approximately 1,500 stores and does not use facial recognition. The company uses the readers to combat organized retail crime, a practice that has drawn public scrutiny amid broader concerns about surveillance. Flock has updated its terms and conditions in response to criticism, and some governments are reconsidering the technology. Ulta's director of organized retail crime, Rory Stallard, has publicly praised Flock's technology for helping collaborate with law enforcement. The retailer did not respond to questions about the start of the partnership.
Receive all future signals for 404 Media & competitors in your briefing
Never miss material M&A deals, leadership changes, account wins, or product rollouts. Polaris7 monitors 20,000+ primary sources 24/7, delivering verified telemetry directly into your executive briefing.
