Motorola's ALPR system has suffered a significant data breach, exposing live video feeds and detailed vehicle records including license plates, car makes, models, and colors across the US. The breach occurred due to misconfiguration, allowing unrestricted internet access to real-time surveillance data without any authentication requirement. This information was meant for law enforcement use, but the flaw discovered by a security researcher led to unintentional public exposure, compromising vehicle owner privacy and highlighting the potential for surveillance abuse.
Source: https://www.wired.com/story/license-plate-reader-live-video-data-exposed/
TPRM report: https://scoringcyber.rankiteo.com/company/motorolasolutions
"id": "mot000011325",
"linkid": "motorolasolutions",
"type": "Breach",
"date": "1/2025",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"
{'affected_entities': [{'industry': 'Technology',
'name': 'Motorola',
'type': 'Corporation'}],
'attack_vector': 'Misconfiguration',
'data_breach': {'personally_identifiable_information': ['License plates',
'Car makes',
'Models',
'Colors'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Live video feeds',
'Vehicle records']},
'description': "Motorola's ALPR system has suffered a significant data "
'breach, exposing live video feeds and detailed vehicle '
'records including license plates, car makes, models, and '
'colors across the US. The breach occurred due to '
'misconfiguration, allowing unrestricted internet access to '
'real-time surveillance data without any authentication '
'requirement. This information was meant for law enforcement '
'use, but the flaw discovered by a security researcher led to '
'unintentional public exposure, compromising vehicle owner '
'privacy and highlighting the potential for surveillance '
'abuse.',
'impact': {'data_compromised': ['Live video feeds',
'Vehicle records including license plates, '
'car makes, models, and colors'],
'systems_affected': ['ALPR system']},
'post_incident_analysis': {'root_causes': ['Misconfiguration']},
'title': 'Motorola ALPR System Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Unrestricted internet access to real-time '
'surveillance data without authentication'}