Hacker Breach Exposes Flock Camera’s Hidden People Tracking and Massive Data Volume

Key points

• Hackers from the collective stegan0gram dismantled a Flock camera, recovered an encryption key, and shared the data with 404 Media and WIRED for analysis.
• The recovered logs show the camera generated approximately 1.6 million images of 50,200 vehicles over 21 days, with a typical vehicle producing around 28 images.
• Software analysis confirms the camera explicitly detects people, not just vehicles, though no active face recognition capabilities were found in the device's code.
• Flock’s national network allows data sharing across thousands of agencies; in Alpharetta, Georgia, records were accessible to over 2,000 entities, including federal offices.
• Flock Safety called the removal illegal and urged hackers to use their vulnerability disclosure policy, while critics warn that sabotage may strengthen public support for surveillance.

Background

This incident follows earlier controversies regarding Flock’s data sharing practices, including reports of local police using the system for immigration enforcement and personal tracking. In August 2026, WIRED reconstructed Flock’s police software, 'OS Investigate,' revealing its ability to track movement patterns. Additionally, in 2026, a Mooresville officer was arrested for misusing Flock data to track an ex-wife, highlighting ongoing concerns about data misuse.

How outlets are covering it

404 Media and WIRED emphasize the technical breach and the revelation that Flock cameras detect people, challenging the company’s claim of on-device encryption. They highlight the massive volume of data collected and the broad access granted to external agencies. In contrast, Flock Safety maintains that the removal was illegal and that the hackers failed to report vulnerabilities through proper channels. Local officials, such as Congressman David Valadao, express concern about data sharing across state lines via networks like WSIN, calling for greater transparency and stricter federal limits on data retention and access.

Why it matters

The breach exposes significant gaps in the security of surveillance infrastructure and raises urgent questions about the scope of data collection. It highlights that Flock cameras may track individuals beyond vehicle movements, potentially infringing on privacy without public knowledge. The incident also underscores the tension between local law enforcement needs and broader privacy concerns, as data is shared across a vast national network with limited oversight.

What to watch

Flock Safety is likely to face increased scrutiny from lawmakers and privacy advocates regarding its data sharing practices and security protocols. The hacker collective may publish further details on their methods, potentially enabling others to replicate the breach. Local jurisdictions may reconsider their use of Flock cameras, as some towns have already announced plans to discontinue them. Congress may move to introduce legislation limiting data retention and access, as suggested by Congressman Valadao.