Flock Safety: Security Breaches, Data Leaks & Contract Cancellations

Why This Matters: Flock Safety operates over 90,000 automated license plate reader (ALPR) cameras nationwide. Multiple security breaches, unauthorized data sharing with federal agencies including ICE, and company misconduct have led dozens of cities to cancel their contracts in 2025-2026.

🚨 Data Breaches & Security Vulnerabilities

Flock Safety Exposed Live Police Camera Feeds in Data Breach
Live feeds from Flock's Condor cameras were publicly accessible on the internet, allowing anyone to watch police surveillance in real-time and access archival footage. YouTuber Benn Jordan discovered the breach and called it "Netflix for Stalkers."
January 9, 2026 - WFLX News
Flock Safety API Key Leak Exposes Nationwide Surveillance Data
Security researcher discovered hardcoded ArcGIS API key in 53 JavaScript instances, granting unrestricted access to sensitive surveillance data including license plate detections and police locations nationwide.
January 2026 - WebProNews
2.3 Million License Plates Leaked Through Police Records Requests
Multiple police departments failed to properly redact 2.3 million license plates in audit logs released through public records requests. Flock attempted to shut down HaveIBeenFlocked.com, which allows people to check if they were surveilled.
January 2026 - Straight Arrow News
Stolen Police Logins Expose Flock Cameras to Hackers & Foreign Spies
Sen. Ron Wyden and Rep. Raja Krishnamoorthi demand FTC investigation after finding Flock doesn't require multi-factor authentication, allowing hackers and foreign spies access through stolen passwords found on Russian cybercrime forums.
November 4, 2025 - TechCrunch
Flock Cameras Remained Active After Cities Ordered Them Off
Eugene, OR and Cambridge, MA discovered Flock cameras continued collecting data weeks after officials explicitly ordered them deactivated. Eugene had 8,500 plates captured in 30 days after shutdown order.
December 10, 2025 - The Record

🏛️ Federal Data Sharing & ICE Access

Santa Cruz Data Accessed by ICE, Violating California Law
Between June-October 2025, state agencies accessed Santa Cruz camera data approximately 4,000 times on behalf of federal immigration enforcement (ICE), violating California's SB 34 sanctuary law.
January 2026 - KQED
Flock's Own Admission: Federal Agencies Had "National Lookup" Access
Flock Safety admits federal agencies had access to search thousands of cameras nationwide through "National and State Lookup" feature. Company later removed federal agencies but only after public outcry.
2025 - Flock Safety Blog
3,789 Illegal Searches by Federal Immigration Agencies in Santa Cruz Alone
Public records reveal at least 3,789 searches on behalf of federal immigration agencies violated California law in Santa Cruz from June-October 2025. Even with "protections," in-state agencies searched on behalf of ICE.
January 2026 - Lookout Santa Cruz
Flock Database Used to Hunt Woman Who Had Abortion
Police searched Flock's centralized database to locate a woman who self-administered an abortion, raising alarms in Cambridge, MA and other cities about reproductive rights surveillance.
December 2025 - The Record

🏙️ California Cities Canceling Contracts

Santa Cruz Becomes First California City to Cancel Flock Contract
Santa Cruz City Council voted 6-1 to terminate its Flock contract on January 13, 2026, citing civil liberties threats greater than any security benefits. Mayor Fred Keeley: "This is about a company we can't trust."
January 15, 2026 - KQED
Santa Cruz Vote: Public Applauds "Huge Win" Against Mass Surveillance
Council chambers packed with "Get the Flock Out" signs. Residents and ACLU praised decision. ACLU chair: "Literally the only way to protect the data from being misused is to not collect it."
January 13, 2026 - Santa Cruz Local
Capitola Data Also Accessed by Georgia Police Chief Arrested for Stalking
Capitola Police Chief confirmed federal and out-of-state agencies accessed their Flock data for ICE. A Georgia police chief arrested for using Flock to stalk women also searched Capitola's data.
January 2026 - Lookout Santa Cruz

🌎 Other Cities Canceling Contracts Nationwide

Flagstaff, Arizona Unanimously Cancels Flock Contract
Flagstaff City Council voted unanimously in December 2025 to end contract after months of community concern. Resident: "We are in a new era" with AI and federal administration threats to privacy.
December 17, 2025 - KJZZ Arizona
Eugene, Oregon Cancels After Finding "Vulnerabilities and Limitations"
Eugene Police Department terminated contract in December 2025, citing concerns about "data security and system reliability." Police Chief Chris Skinner moved forward with cancellation after camera was turned on without permission.
December 8, 2025 - Daily Emerald
Staunton, Virginia Cancels After CEO's Hostile Email
Staunton ended contract after Flock CEO Garrett Langley sent unsolicited email attacking critics as supporters of "lawlessness" and wanting to "defund the police." City: CEO's narrative "does not reflect our values."
January 2026 - Straight Arrow News
Nearly 30 Municipalities Nationwide Have Canceled in 2025
Cities canceling or rejecting Flock include: Eugene OR, Springfield OR, Flagstaff AZ, Staunton VA, Cambridge MA, San Marcos TX, Mountlake Terrace WA, Evanston IL, Austin TX, and more. Electronic Frontier Foundation calls it "democracy in action."
December 2025 - Lookout Eugene-Springfield
Cambridge, Massachusetts Terminates After Unauthorized Camera Installation
Cambridge canceled contract after Flock staff installed two new cameras weeks after City Council ordered 16 existing cameras deactivated. Company violated direct orders from city officials.
December 10, 2025 - The Record
Sedona, Arizona Also Canceled Contract
Sedona canceled its Flock contract in Fall 2025. Coconino County still has 18 Flock cameras that activists are working to remove.
Fall 2025 - AZ Family

📊 Privacy Advocacy & Community Resources

What the Flock: Understanding ALPR Privacy Concerns
Comprehensive overview of Flock's surveillance capabilities, privacy risks, and why communities are pushing back. Includes links to tracking resources like Eyes on Flock, ALPR Watch, and Atlas of Surveillance.
November 20, 2025 - Malwarebytes
HaveIBeenFlocked.com - Check If You've Been Surveilled
Website allows people to check if their license plate was searched by police using Flock data accidentally leaked through public records requests. Flock tried to shut it down, claiming it "threatens public safety."
January 2026 - Straight Arrow News
EFF: Contract Cancellations Show "Democracy in Action"
Electronic Frontier Foundation's Sarah Hamid: Communities exercising "procurement power — local democracy's most underutilized tool" to reject mass surveillance that can't be adequately mitigated through policy alone.
January 2026 - Straight Arrow News
Key Takeaways: