Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works

Flock camera data can be accessed by thousands of agencies nationwide, not just local law enforcement.

Hackers gained unauthorized access to a Flock Safety camera, copying its storage and extracting an encryption key that unlocked thousands of vehicle detection videos. The breach, conducted by a collective called stegan0gram, provided an unprecedented look inside the system, which Flock has described as protected by on-device encryption. Analysis of the recovered data revealed that the camera's software detects people in addition to vehicles and license plates. While sensitive storage remained inaccessible, the recovered logs showed the camera generated over a million images across several weeks, sometimes isolating bumper stickers and other graphics. This incident follows previous revelations about Flock's data network accessibility and is part of a broader trend of individuals sabotaging these surveillance devices. Flock stated that the unauthorized removal and tampering are illegal and encouraged the hackers to report vulnerabilities through their official channels. Security researchers previously identified flaws that could allow root-level access, though Flock downplayed their severity.

The breach demonstrates that Flock's on-device encryption, while protecting some data, is not impenetrable, as an encryption key was successfully extracted from the device itself. This challenges Flock's security narrative and suggests a greater risk of data exposure than previously acknowledged. The revelation that the camera software explicitly detects people, not just vehicles, broadens concerns about the scope of surveillance capabilities, particularly for privacy advocates and civil liberties groups.

This event intensifies the debate around the use of automatic license plate readers and community surveillance technologies. The hackers' stated goal of reverse-engineering the cameras to expose their inner workings highlights a growing public mistrust and desire for transparency. The incident may prompt more towns and cities to reconsider or discontinue their use of Flock cameras, as some have already done in response to previous controversies.