Hackers Extract Encryption Keys from Flock Surveillance Cameras, Revealing Person Detection Alongside Vehicle Tracking

Hackers have extracted encryption keys from automated license plate recognition (ALPR) cameras deployed by Flock Safety across roughly 6,000 municipalities nationwide, successfully decrypting stored data.

Individuals operating under the name "stegan0gram" physically removed a Flock camera installed along a roadside and created a near-complete copy of its internal storage.

Flock cameras run on a custom version of Android, with the extracted firmware showing a build date of June 5, 2025.

There have also been reported cases of police chiefs abusing license plate tracking systems to stalk former romantic partners.

In early 2025, security researcher Jon Gaines reverse-engineered Flock's license plate reader and documented a vulnerability that allowed root access.