Hackers Expose Flock Safety Camera's Extensive Tracking Capabilities, Including People Detection

A significant security breach has provided an unprecedented look into the inner workings of Flock Safety's surveillance cameras, revealing their extensive capabilities in tracking both vehicles and individuals. Hackers successfully removed a Flock camera from its mounting above a roadway, then created a near-complete copy of the data stored within its internal memory. These sensitive files were subsequently shared with media outlets 404 Media and WIRED, as well as the transparency nonprofit Distributed Denial of Secrets, which facilitated further distribution to WIRED. This breach directly challenges Flock Safety's public assertions that its on-device data is protected by robust encryption.

The hackers claim to be disseminating details about their method of obtaining the camera's software, with the stated aim of empowering other individuals to replicate their findings. The recovered data, unlocked by an encryption key discovered on the device itself, includes thousands of video clips documenting vehicle detections. While the most critical and sensitive storage, particularly concerning the automatic license plate reader (ALPR) functionalities, remained inaccessible and encrypted, the analysis of the accessible data has yielded significant revelations.

This analysis demonstrates that the software operating on the Flock camera explicitly detects and logs the presence of people, in addition to vehicles, license plates, and bicycles. The system is designed to capture a multitude of images of a single passing vehicle, with recovered logs indicating that over a million images were generated within a period of several weeks. Furthermore, the camera's advanced computer-vision software is capable of isolating specific visual details, such as bumper stickers and other graphics. In one notable instance, the software identified an American flag patch on a motorcyclist's saddlebag, underscoring its granular level of detail.

Flock Safety cameras are widely deployed by various entities, including homeowners associations, neighborhood watch groups, and law enforcement agencies, to monitor both public and private areas. The company markets its technology as a tool for crime solving and enhancing neighborhood security. However, Flock Safety has faced prior scrutiny regarding data privacy concerns and the potential for the misuse of its pervasive surveillance technology. This latest security incident amplifies existing questions about the security protocols and transparency surrounding systems designed for widespread public and private surveillance, particularly concerning the identification and tracking of individuals.