One Deputy, 83,000 Cameras

The Ride to the Post Office

A few days back I took the electric scooter to the post office. Melbourne, Florida, a nothing errand, ten minutes each way. Somewhere on that route I passed under a camera on a pole, run by a company called Flock Safety. The errand quit being the thing on my mind. My phone was in my pocket. My earbuds were in my ears, and the scooter under me talks to an app over Bluetooth. All I could think about was what that camera was logging off me. Was it probing my devices for known security holes? Could it plant something on my phone without me touching a thing? I was just headed to the post office, enjoying my ride.

Twenty-six years in this trade does that to a head. A civilian looks up and sees a camera doing camera things. I see a radio on a pole with a cellular data link running back to somebody's server, and I want to know what it carries. Call it paranoid if you want. Then read the record below.

What the Camera Takes

Flock Safety sells camera systems to police departments and private customers, and it operates most of these poles. The company has more than 100,000 cameras across the country. The marketing is calm about what they do. The cameras photograph the license plate and the vehicle around it. They record what the company calls visible characteristics, meaning the bike rack or the toolbox. The company's public question-and-answer page swears off facial recognition and says the focus stays on vehicles.

Flock's training videos say more than that page does. InvestigateTV, a national reporting team, pulled Flock's own training webinars on 15 Jun 26. The instructors in them teach police to keep "tracking that vehicle from location to location to location." Flock's newer camera model, called the Condor, shoots video. The training language says it will "acquire and track that person as they walk." A reporter stepped in front of one on a public trail, and the camera turned to hold him in the frame. Benn Jordan, a security researcher, put it plainly. These cameras use artificial intelligence (AI) to follow you around whether police are looking for you or not.

So what about my pocket? The standard Flock plate camera, called the Falcon, does not log Bluetooth signals today. That needs saying plainly, because this piece only works if it is honest. What comes next is another matter. Leonardo, a defense contractor, now sells a product called SignalTrace. It pairs plate readers with detection of the wireless devices rolling past, the phone in your pocket included. Earbuds and smartwatches show up in the same sales pitch. My instinct under that pole was wrong by about one product generation.

I tried to find out whose camera I rode under. I still do not know. The Electronic Frontier Foundation (EFF), a digital rights group, keeps a public inventory called the Atlas of Surveillance. It shows the Brevard County Sheriff's Office running 15 Flock plate readers as of Sep 25, and Melbourne police nowhere in the file. The pole could belong to the city or the county. It could also belong to a homeowners association or a business feeding Flock's private alert network. No official inventory exists for a resident to check. Volunteers built one instead, a map called DeFlock that anyone can add to, now tracking more than 100,000 of these devices. The only list of who is photographing you got built by strangers, not by any agency.

One Search, 83,000 Cameras

The camera is the small part of the product. The network behind it is what Flock actually sells. An agency that opts in can search the stored data of every other opted-in agency in the country, from any terminal. Those searches travel much farther than anyone watching a city council vote ever hears.

On 09 May 25 a sheriff's deputy in Johnson County, Texas went looking for a woman who had ended her own pregnancy. The reason he typed into the log: "had an abortion, search for female." That single query hit 6,809 networks and 83,345 cameras. Some of those cameras sit in Washington State, where what she did is legal. The sheriff called it a welfare check. Court records showed a death investigation, with prosecutors weighing charges.

Immigration and Customs Enforcement (ICE) holds no Flock contract. The news site 404 Media read the search logs anyway. It counted more than 4,000 lookups run for immigration enforcement through local departments, with no contract on record. Customs and Border Protection (CBP), the border agency, had access to more than 80,000 cameras through pilot programs. At least one department did not know it had joined one. A letter from Senator Ron Wyden's office added the Secret Service and Navy investigators to the list of federal agencies riding along. This spring the city of Dayton, Ohio audited its cameras. It found more than 7,000 immigration searches that broke city policy, and city workers put trash bags over all 72 cameras.

Off the clock is worse. The Institute for Justice, a public-interest law firm, counts at least 24 officers caught using plate readers to track former partners and romantic interests. 404 Media ran the tally under a headline saying cops keep getting arrested for using Flock to stalk people.

And the machine misses. Flock claims 93 percent accuracy across more than 20 billion scans a month. The Institute for Justice did that arithmetic and got over a billion bad reads a month. The same firm documented 27 innocent drivers stopped over misread plates, most with guns drawn. In Sherwood, Arkansas this past February, a camera read one digit wrong. Officers held a couple at gunpoint while their six-week-old baby waited in the car. The Los Angeles Police Department (LAPD) had its inspector general check two months of plate alerts, and a third of them were false. The department let its Flock contract run out on 11 Jul 26.

What the Fourth Amendment Says

The Fourth Amendment to the US Constitution runs fifty-four words. The people have the right "to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures." No warrant issues without probable cause, sworn, and specific about the place and the thing. Courts now read that language to cover your phone and the record of everywhere you go.

The amendment exists because the colonists lived under general warrants. Those were blanket permissions for the king's officers to rummage through anyone in search of something. A camera network that logs everyone and answers to any small-town terminal does the same job a general warrant did. The difference is that somebody now pays a subscription for it.

The courts are moving toward that question. In 2018 the Supreme Court ruled in a case called Carpenter that a detailed, easily compiled record of your movements takes a warrant. Two residents of Norfolk, Virginia sued over that city's 176-camera Flock grid. On 27 Jan 26 a federal judge ruled against them. His reasoning was that the system cannot capture "the whole of a person's movements." His own opinion noted that one plaintiff's car got photographed 475 times in four months. Then on 29 Jun 26 the Supreme Court ruled on geofence warrants, the kind that demand data on everyone who was inside an area. The court held that pulling location data from a mass database is a search, even when the government takes only a slice. That was the exact logic holding the Norfolk decision up. The appeal now sits fully briefed at the Fourth Circuit, the federal appeals court for that region.

Florida went past the federal minimum a long time ago. Article I, Section 23 of the state constitution has been on the books since 1980. It reads: "Every natural person has the right to be let alone and free from governmental intrusion into the person's private life." I rode under the camera anyway.

It Could Not Pass an Inspection

Under the pole I worried the camera was probing my devices. I had it backwards. The camera is the easy target. Researchers demonstrated a full takeover of one using a button sequence on the back panel. The whole attack took about 30 seconds, on an operating system Google quit patching in 2021. They documented WiFi passwords wired permanently into the device along the way. In Dec 25 reporters found at least 60 Flock video cameras reachable from the open internet with no password at all. The exposed feeds carried live video plus a month of archive, and one reporter watched himself walk past on a Bakersfield feed.

The accounts fail like the hardware. Flock never forced multi-factor authentication on its existing police customers, meaning a second login check beyond the password. Senator Wyden wrote to the Federal Trade Commission (FTC), the agency that polices unfair business practices. His letter counts at least 35 stolen Flock customer passwords circulating on crime forums. Forbes reported hundreds of cameras installed without required permits.

I hang life-safety systems for a living. Every fire alarm job I touch gets a permit before the first wire and an inspector before I close it out. The equipment I mount carries a listing somebody tested. A four-truck shop that ran its work the way Flock runs this network would lose its license, and it should. The company photographing the country answers to no inspector. On 03 Nov 25 two members of Congress asked the FTC to become one.

The Record Is the Product

Nobody asked me anything at any point in this. My movements sit in a private company's cloud, and agencies pay roughly $2,400 per camera per year to reach them. When Los Angeles renegotiated this month, it had to write city ownership of its residents' plate data into the demands. Without that line, the data stays Flock's.

Flock also built a people-lookup tool called Nova. The plan was to fuse plate data with files from data brokers, the companies that buy and sell personal records. Stolen breach data was in the plan too, until employees pushed back and reporters started calling. Amazon's Ring camera unit announced a partnership with Flock, then killed it in Feb 26 after the public got a look and recoiled.

Florida had a shot at rules this spring. House Bill 543 (HB 543) capped private plate-reader data storage at 30 days and banned selling the data. The House passed it 107 to 1. The Senate passed it 33 to 0. It died on 13 Mar 26 because the two chambers ran out of time to settle their competing amendments. Nobody voted no, and Florida still has no plate-reader law.

Check Your Street

Start where I started, on your own route. DeFlock maps the cameras your town never announced. A lookup site called HaveIBeenFlocked shows whether your local agency holds a Flock contract and runs a public page showing its search activity. Ten minutes gets you the picture of your own neighborhood.

The next move is paper. Every story cited in this piece began with Flock's own search logs, obtained by ordinary citizens filing public-records requests. Florida's public records law, Chapter 119, makes that request cheap and hard to refuse. Ask your department for the Flock audit log with the search-reason fields. Then read what your neighbors got searched for.

Louder channels exist too. The American Civil Liberties Union (ACLU) publishes a toolkit called Get The Flock Out, with a sample email for your representatives. The FTC has been formally asked to investigate Flock, and every complaint filed at reportfraud.ftc.gov adds weight to that request. HB 543 comes back in some form when legislators file this fall's bills. Tell yours to bring the plate-reader rules back and finish the job.

I still take the scooter to the post office, and the camera is still on the pole. The difference now is that I know what it is plugged into.

Key Takeaways

• One opted-in search reaches the whole network. A single Texas query on 09 May 25 hit 6,809 networks and 83,345 cameras hunting a woman over an abortion.
• Flock's marketing says vehicles. Its training webinars teach person-tracking, and its Condor cameras hold walking people in the frame.
• The Supreme Court's 29 Jun 26 geofence ruling removes the reasoning that saved Norfolk's cameras. The appeal is fully briefed at the Fourth Circuit.
• The system fails basic security. Researchers took full control of a camera in about 30 seconds, on an operating system Google stopped patching in 2021, and reporters later found Flock cameras streaming on the open internet with no password.
• Florida's constitution promises the right to be let alone. The state's one shot at plate-reader rules died on 13 Mar 26 with nobody voting no.
• Check DeFlock for your street. Then file a Chapter 119 public-records request for your department's Flock audit log and read what your neighbors got searched for.