Flock’s Eyes Everywhere: How One Firm’s Cameras Trap Innocents and Test Privacy Limits

A Minnesota journalist slipped behind the wheel of a sleek Range Rover for a routine test drive. Nothing unusual. Yet days later, police cars swarmed him and his wife. Guns drawn. Sirens cutting the air. The reason? Flock Safety cameras had tagged the vehicle as stolen. The system got it wrong.

Joel Feder recounted the episode in stark terms. “I got surrounded by cops,” he told local news outlets. The incident, first detailed by Futurism, exposed a flaw in the expanding web of automated license plate readers. Flock’s network had tracked the car across multiple days. Its algorithms flagged a mismatch. Officers responded as if confronting a real threat. No one hurt. But the fear lingered. And questions multiplied.

Flock Safety operates thousands of cameras across the country. They capture plates, vehicle colors, makes, models. Data feeds into a cloud database. Police search it for hits on stolen cars, suspects, Amber Alerts. The company claims it solves crimes fast. Recovers vehicles. Helps investigations. Yet errors like Feder’s reveal the other side. Innocent drivers swept into a digital dragnet. Movements logged for 30 days or more. Accessible by thousands of agencies.

But the problems run deeper than one mistaken flag. WebProNews laid out the architecture of risk in detail. Hardware vulnerabilities allow root access in seconds. A simple button sequence on the camera back. USB ports accept malicious payloads. Researcher Jon Gaines documented 51 findings. Twenty-two earned CVE identifiers. Live feeds leaked in some cases. Archived video vanished after hackers struck. Credentials stolen from police accounts appeared on dark web markets.

Flock insists the cloud stays secure. Images delete after 30 days in most setups. Local agencies control access. Audit logs track queries. Yet those logs tell a different story. Millions of searches. Some from federal agencies pursuing immigration cases or other priorities that clash with state laws. In Shaker Heights, Ohio, records showed over 700,000 data accesses. Many came from outside agencies, including ICE. The city responded by banning immigration-related searches. Cleveland’s council voted against renewing its contract.

Pushback grows. At least 30 localities have ditched Flock since early 2025. Flagstaff, Arizona. Cambridge, Massachusetts. Eugene, Oregon. Santa Cruz, California. Hillsborough, North Carolina. Staunton, Virginia. Reasons converge on privacy fears and unauthorized data sharing. Flagstaff Mayor Becky Daggett said it plain. The technology “wasn’t going to be well received.” Susie O’Hara in Santa Cruz pointed to a multibillion-dollar company “putting our local data at risk.” And in Staunton, Police Chief Jim Williams defended citizen questions. “Democracy in action,” he called it. NPR tracked the wave of cancellations.

The Electronic Frontier Foundation spent 2025 investigating. Its reports painted a grim picture. Flock data used to track protesters. Target Romani communities with extra scrutiny. Monitor women seeking reproductive care across state lines. More than 50 agencies ran hundreds of searches tied to protest activity. One analysis covered 10 months of nationwide data. The pattern held. Mission creep. From stolen cars to political expression. EFF detailed the abuses.

Then came the Supreme Court. In a ruling on cell phone location data, justices curbed geofence warrants. Police can no longer scoop broad swaths of phone tracking without strong probable cause. The decision, handed down days ago, immediately raised parallels. Flock creates a similar map of movements. Not phones. Cars. But the effect feels close. Ohio Fraternal Order of Police President Jay McDonald voiced worry. He hoped the ruling spared Flock tools. Cleveland Professor Mike Benza saw it differently. The Fourth Amendment stands against a surveillance state. Flock’s collection might cross that line if it goes beyond plates to patterns of life. Ohio Capital Journal connected the dots.

Company CEO Garrett Langley pushes back hard. In emails to clients he framed critics as part of a “coordinated attack.” Groups that want to “defund the police, weaken public safety, and normalize lawlessness.” He compared some efforts to Antifa. Even labeled one a “terroristic organization.” The ACLU called his stance “simplistic, juvenile, and authoritarian.” Trust erodes further.

Security lapses compound the issue. Lawmakers urged the FTC to probe Flock after stolen police logins surfaced. Hackers could tap the network. Impersonate officers. Access feeds. TechCrunch reported the warnings last fall. Data exposures hit Condor camera feeds in one case. Outsiders viewed them online.

Some departments report success. Columbia, Missouri, logged 5,521 alerts in the first year. Over half tied to warrants. Recoveries. Arrests. The 2025 surveillance report highlighted proactive policing gains. Yet Columbia also quietly stopped publishing detailed audit data. User IDs redacted. Federal agency references blurred. Transparency fades.

LAPD faces a lawsuit from the Stop LAPD Spying Coalition. The group wants records on a years-long Flock partnership. Only one expired memo released despite seven years of ties. Public records requests hit walls. Accountability slips.

Washington state passed SB 6002. New limits on automated license plate readers. Effective this spring. Other states eye restrictions. Oregon paused systems over sanctuary law conflicts. Federal queries risked violating local protections. Senator Ron Wyden slammed the company. Flock couldn’t honor pledges to shield Oregonians from immigration or abortion-related searches.

Private users join in. HOAs. Businesses. Retail spots. The network spreads. DeFlock.me maps over 76,000 cameras. Five thousand law enforcement contracts. Twenty billion plates scanned monthly. The scale staggers. Every drive logged. Patterns emerge. Home. Work. School. Protest. Clinic. No warrant needed for many queries.

Errors aren’t rare. Another Colorado man found himself flagged by an old warrant from another county. Cameras pinged his presence. Police stopped him repeatedly. “All I know is I’m in the system now,” he said. “And there’s really no easy way to get out.” Futurism covered that trap too.

Vigilantes respond in kind. Virginia saw cameras vandalized. Trash bags. Damage. One engineer faces felony charges for dismantling devices. He called it resistance to an unhealthy surveillance state. Public sentiment splits. Some cheer the tools for catching criminals. Others see perpetual observation. Freedom traded for security.

Flock expands anyway. Drones. New sensors. Voice detection in testing. The company valuation hit billions. Growth continues despite lawsuits, cancellations, legislative curbs. Langley maintains the focus stays on safety. Critics counter that safety cannot justify mass tracking without guardrails.

The Feder incident offers a warning. One misread plate. Days of silent tracking. Then armed officers. No violence. This time. But the system operates at machine speed. Humans react to its flags. False positives carry real consequences. Fear. Lost time. Eroded trust.

Cities that canceled contracts speak of values. Public reception. Risk to local data. Democracy in action, as one chief put it. Others double down. New contracts signed. Millions spent. Elk Grove, California, approved $1.6 million amid outcry. Crime concerns win out in some debates.

Yet the legal ground shifts. Supreme Court skepticism toward broad digital searches could reach Flock. Fourth Amendment challenges mount. EFF litigation. ACLU letters. State audits. The unaccountable network faces scrutiny.

Drivers now glance upward at poles. Wonder if their plate just joined a database. Searched by an agency across the country. Linked to a protest they joined last month. Or a medical trip they thought private. The cameras don’t forget easily. And the company holds the keys.

So the debate intensifies. Safety gains measured against liberty costs. One man’s test drive turned police encirclement becomes emblematic. A single glitch in a vast machine. But that machine watches millions. Every day. Without pause. The question remains. Who watches the watchers? And what happens when they get it wrong?