Lawmakers Demand Investigation into Flock Safety's Cybersecurity Practices
Senator Ron Wyden and Representative Raja Krishnamoorthi have called for a federal investigation into Flock Safety, a company operating the largest network of automated license plate readers (ALPRs) in the United States, citing concerns over negligent handling of Americans’ personal data and inadequate cybersecurity measures. The lawmakers allege that Flock Safety fails to enforce cybersecurity best practices, such as mandatory multi-factor authentication (MFA), leaving customer accounts vulnerable to compromise. Reports indicate that at least 35 Flock customer accounts have been stolen by hackers, and the company’s voluntary authentication does not natively support phishing-resistant MFA. These security lapses have raised fears that hackers or foreign actors could gain access to sensitive location data on millions of Americans, and that law enforcement agencies can improperly share access to Flock’s systems.
The controversy surrounding Flock Safety extends beyond cybersecurity, as privacy advocates and local communities have raised alarms about the potential for abuse and invasive tracking through the company’s ALPR network. Some communities have already succeeded in removing Flock cameras, motivated by concerns over wrongful detentions, privacy violations, and the use of Flock data in sensitive investigations, such as those involving abortion patients and undocumented immigrants. Lawmakers argue that Flock’s practices expose Americans to significant risks and have urged the Federal Trade Commission (FTC) to investigate, referencing previous FTC enforcement actions against companies that failed to implement adequate authentication controls.
Sources
Related Stories
Flock Safety License Plate Readers Used for Protest Surveillance
Police departments across the United States have used Flock Safety's automated license plate reader (ALPR) cameras to monitor protest activity, according to research by the Electronic Frontier Foundation (EFF). Over a ten-month period, more than 50 federal, state, and local agencies conducted protest-related searches using Flock Safety's national network, targeting events such as the "No Kings" demonstrations, the 50501 movement, and "Hands Off!" protests. The EFF's findings highlight that law enforcement agencies sometimes focused on specific activist groups, raising significant privacy and civil liberties concerns. The report also notes that Flock Safety has lost police department customers following revelations of its technology being used to track undocumented immigrants and individuals seeking abortions. Flock Safety's ALPR systems are designed to scan and photograph every license plate that passes by, storing the data for later searches. While these systems have been credited with aiding criminal investigations, their widespread deployment has sparked debate over the balance between public safety and individual privacy. The growing use of ALPRs, especially by law enforcement to track protestors and other groups, has intensified scrutiny from privacy advocates and the public regarding the potential for mass surveillance and misuse of collected data.
3 months agoAmazon Ring and Flock Safety Partnership Expands Law Enforcement Access to Private Camera Footage
Amazon’s Ring announced a new partnership with Flock Safety, a company known for its AI-powered surveillance cameras and extensive law enforcement clientele, including federal agencies such as ICE, the Secret Service, and the Navy. This collaboration will enable approximately 5,000 local law enforcement agencies to request access to footage from Ring cameras through Flock’s surveillance platforms, FlockOS and Flock Nova. Law enforcement officers will be able to send direct posts in the Ring Neighbors app, specifying the location, timeframe, investigation code, and details of the incident for which footage is being sought. Ring users can review these requests anonymously and voluntarily submit their footage, which Flock will securely package and deliver to the requesting agency. Flock’s technology is notable for its ability to scan license plates and other vehicle identifiers, as well as perform natural language searches to find individuals matching specific descriptions in video footage. The partnership raises significant privacy concerns, as Flock’s AI-powered systems have been criticized for exacerbating racial biases in law enforcement operations. The integration of Ring’s vast network of consumer cameras with Flock’s law enforcement tools could potentially provide authorities with access to millions of additional video feeds. This development has reignited longstanding debates about surveillance, privacy, and the potential for abuse, especially given Ring’s previous issues with video security and employee access. In 2023, the FTC fined Ring $5.8 million after it was revealed that employees and contractors had unrestricted access to customer videos for years. The partnership is positioned as a tool for evidence collection and investigative work, but critics warn that it could further erode the privacy of individuals whose homes and neighborhoods are monitored by Ring devices. The collaboration also highlights the growing trend of private surveillance technology companies working closely with law enforcement, blurring the lines between public safety and personal privacy. Flock’s announcement emphasizes that all footage sharing remains voluntary, but the scale and ease of law enforcement requests may pressure users to comply. The partnership is expected to streamline investigative processes for police, but it also amplifies concerns about the normalization of mass surveillance in residential areas. Privacy advocates are calling for greater transparency and oversight regarding how footage is requested, shared, and used by authorities. The move underscores the increasing reliance of law enforcement on private-sector surveillance infrastructure, raising questions about accountability and the protection of civil liberties.
5 months ago
Public backlash against consumer and municipal surveillance camera ecosystems
A nonprofit, the **Fulu Foundation**, launched a bounty aimed at weakening Amazon **Ring**’s dependence on cloud services by rewarding a method to run Ring camera systems *locally* and prevent video from being transmitted to Amazon’s servers. The program offers **$10,000 up front** and will match community donations up to an additional **$10,000**, but it is explicitly not a general vulnerability bounty; it prioritizes a practical path to local control and data sovereignty, citing Ring’s prior privacy lapses and an FTC settlement as justification. Separately, public anger over surveillance has escalated into physical attacks on **Flock Safety** license-plate reader (LPR) cameras, with reports of devices being dismantled, smashed, spray-painted, or cut down in multiple U.S. states. The backlash is tied to concerns that LPR data supports immigration enforcement and deportations; while Flock says it does not share data with ICE directly, reporting indicates **local police sharing access** to Flock systems and databases with federal authorities, prompting some communities to push for contract terminations and others to resort to vandalism.
3 weeks ago