Flock ALPR Data Leak Exposes Law Enforcement Search Queries in Search Engines
Privacy advocates and 404 Media uncovered a data exposure involving Flock Safety, a company specializing in automatic license plate readers (ALPRs), revealing sensitive law enforcement search details in public search engine results. The incident highlights an unusual breach where surveillance data was inadvertently indexed by platforms like DuckDuckGo and Bing.
In May, the NoCo Privacy Coalition a Northern Colorado-based activist group shared findings with 404 Media, demonstrating that search engine URLs contained exposed data, including license plate numbers, vehicle details (make, model, color), search reasons (e.g., "GTA" for grand theft auto, "Investigation"), case numbers, and date ranges. Some results also referenced identifiers like "window stickers" or "top rack."
Flock, which operates thousands of ALPR cameras nationwide, confirmed the issue in a statement, clarifying that the exposed data consisted of search query fragments rather than full search results or underlying law enforcement records. The company estimated around 70 affected queries, dating from 2024 to 2025, and stated it was working with search engines to remove cached content. A spokesperson emphasized that protecting customer data remains a priority and that the company is investigating further.
The leak underscores ongoing privacy concerns surrounding Flock’s technology, which captures and stores vehicle data often without a warrant before making it accessible to law enforcement. The controversy has led some communities to ban or restrict the use of Flock cameras amid debates over surveillance and civil liberties.
Source: https://www.404media.co/flock-leaked-cops-license-plate-searches-via-duckduckgo-bing/
Flock Safety cybersecurity rating report: https://www.rankiteo.com/company/flock-safety
"id": "FLO1781202621",
"linkid": "flock-safety",
"type": "Breach",
"date": "5/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Law enforcement agencies using '
'Flock ALPR systems',
'industry': 'Surveillance Technology, Law Enforcement '
'Solutions',
'location': 'United States',
'name': 'Flock Safety',
'type': 'Company'}],
'attack_vector': 'Inadvertent Public Indexing',
'data_breach': {'number_of_records_exposed': 'Approximately 70 queries',
'personally_identifiable_information': 'License plate '
'numbers, vehicle '
'details',
'sensitivity_of_data': 'High (includes personally '
'identifiable information and law '
'enforcement investigations)',
'type_of_data_compromised': 'Law enforcement search queries, '
'vehicle data, case-related '
'information'},
'date_detected': '2024-05',
'description': 'Privacy advocates and 404 Media uncovered a data exposure '
'involving Flock Safety, a company specializing in automatic '
'license plate readers (ALPRs), revealing sensitive law '
'enforcement search details in public search engine results. '
'The incident highlights an unusual breach where surveillance '
'data was inadvertently indexed by platforms like DuckDuckGo '
'and Bing.',
'impact': {'brand_reputation_impact': 'Negative impact due to privacy '
'concerns and surveillance debates',
'data_compromised': 'License plate numbers, vehicle details (make, '
"model, color), search reasons (e.g., 'GTA' "
"for grand theft auto, 'Investigation'), case "
'numbers, date ranges, identifiers like '
"'window stickers' or 'top rack'",
'identity_theft_risk': 'Potential risk due to exposure of vehicle '
'and case-related data',
'systems_affected': 'Search engine indexing systems (DuckDuckGo, '
'Bing)'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Need for stricter controls on how search engines index '
'sensitive data; importance of transparency in '
'surveillance technology usage',
'post_incident_analysis': {'corrective_actions': 'Removal of cached content '
'from search engines; review '
'of data handling practices',
'root_causes': 'Inadvertent indexing of sensitive '
'search query fragments by search '
'engines'},
'recommendations': 'Implement measures to prevent sensitive data from being '
'indexed by search engines; enhance data protection '
'protocols for law enforcement queries; engage with '
'communities on surveillance policies',
'references': [{'source': '404 Media'}, {'source': 'NoCo Privacy Coalition'}],
'response': {'communication_strategy': 'Public statement confirming the issue '
'and steps taken',
'containment_measures': 'Working with search engines to remove '
'cached content',
'incident_response_plan_activated': 'Yes',
'remediation_measures': 'Investigating the issue further'},
'stakeholder_advisories': 'Communities and law enforcement agencies advised '
'to review data exposure risks and surveillance '
'policies',
'title': 'Flock ALPR Data Leak Exposes Law Enforcement Search Queries in '
'Search Engines',
'type': 'Data Exposure'}