Hackers Expose Flock Safety Camera Data, Revealing Surveillance Capabilities
Hackers from the collective stegan0gram physically removed a Flock Safety roadway camera, extracted a near-complete copy of its stored data, and shared the files with 404 Media and WIRED, offering an unprecedented look into the company’s surveillance operations. The breach exposed how Flock’s cameras track vehicles, people, bicycles, and even small details like bumper stickers despite the company’s claims of on-device encryption.
The hackers bypassed security by recovering an encryption key stored on the device, unlocking thousands of vehicle detection videos. While some sensitive data remained encrypted, the recovered logs revealed the camera generated over a million images in just weeks. The group also published details on their methods, encouraging others to replicate the hack.
Flock’s cameras, used by law enforcement and other agencies nationwide, capture and transmit vehicle data including license plates, make, model, and color to a centralized network. This system allows thousands of agencies, including police departments, colleges, and federal offices, to access the data. Previous investigations by 404 Media found that local police had used Flock’s network to assist ICE and track individuals in sensitive cases, sparking debates over privacy and surveillance.
The hack follows a pattern of resistance against Flock’s cameras, with some communities removing or vandalizing them. In response, certain towns have discontinued their use, while one police department deployed a decoy 3D-printed camera to deter tampering. The hackers framed their actions as a form of resistance, stating they aimed to "liberate" the hardware and expose its surveillance capabilities.
Source: https://www.wired.com/story/hackers-flock-camera-data-shows-how-system-works/
Flock Safety TPRM report: https://www.rankiteo.com/company/flock-
"id": "flo1789583519",
"linkid": "flock-",
"type": "Breach",
"date": "9/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Law enforcement agencies, '
'colleges, federal offices, and '
'other agencies using Flock’s '
'network',
'industry': 'Surveillance Technology',
'location': 'Nationwide (U.S.)',
'name': 'Flock Safety',
'type': 'Company'}],
'attack_vector': 'Physical tampering, encryption key extraction',
'data_breach': {'data_encryption': 'Partial (some data remained encrypted, '
'encryption key was recovered)',
'data_exfiltration': 'Yes (shared with *404 Media* and '
'*WIRED*)',
'file_types_exposed': 'Videos, logs, images',
'number_of_records_exposed': 'Over a million images (logs), '
'thousands of videos',
'personally_identifiable_information': 'License plates, '
'vehicle details '
'(potentially linked '
'to individuals)',
'sensitivity_of_data': 'High (surveillance data, personally '
'identifiable information via vehicle '
'details)',
'type_of_data_compromised': 'Vehicle detection videos, logs, '
'vehicle details (license plates, '
'make, model, color), people and '
'bicycle tracking data'},
'description': 'Hackers from the collective *stegan0gram* physically removed '
'a Flock Safety roadway camera, extracted a near-complete copy '
'of its stored data, and shared the files with *404 Media* and '
'*WIRED*, offering an unprecedented look into the company’s '
'surveillance operations. The breach exposed how Flock’s '
'cameras track vehicles, people, bicycles, and even small '
'details like bumper stickers despite the company’s claims of '
'on-device encryption. The hackers bypassed security by '
'recovering an encryption key stored on the device, unlocking '
'thousands of vehicle detection videos. While some sensitive '
'data remained encrypted, the recovered logs revealed the '
'camera generated over a million images in just weeks. The '
'group also published details on their methods, encouraging '
'others to replicate the hack.',
'impact': {'brand_reputation_impact': 'Negative publicity, erosion of trust '
'in encryption claims',
'data_compromised': 'Vehicle detection videos, logs of over a '
'million images, vehicle details (license '
'plates, make, model, color, bumper stickers), '
'people and bicycle tracking data',
'operational_impact': 'Exposure of surveillance operations, '
'potential replication of hack by others',
'systems_affected': 'Flock Safety roadway camera'},
'motivation': 'Exposure of surveillance capabilities, resistance against mass '
'surveillance',
'post_incident_analysis': {'root_causes': 'Encryption key stored on device, '
'physical security vulnerabilities'},
'references': [{'source': '404 Media'}, {'source': 'WIRED'}],
'threat_actor': 'stegan0gram',
'title': 'Hackers Expose Flock Safety Camera Data, Revealing Surveillance '
'Capabilities',
'type': 'Data Breach',
'vulnerability_exploited': 'Encryption key stored on device'}