Hackers found Flock cameras can track more than just cars — and Boston officials found camera data was shared despite being told it wouldn’t be
Flock is back in the spotlight
- Boston officials released a report explaining why they won't use Flock cameras
- It reveals that Flock shared camera data despite saying it wouldn't
- Hackers also discovered that Flock cameras track more than just license plates
The Flock backlash might have taken a backseat to more recent tech news — namely, whether AI development needs to slow down before superintelligence wipes us out, or, on a lighter note, Apple’s first foldable iPhone — but the anti-surveillance crusade is continuing, with Boston officials and its police department announcing the city will not be relying on the service any longer.
This follows the publishing of a 2025 report which included details on a Flock pilot the city ran in 2025. According to the report, the city discovered Flock was sharing data with external law enforcement agencies — despite Flock’s agreement with Boston saying data sharing was to be turned off, and the company confirming this was the case.
In response, city officials and Boston's police department have committed to no longer using Flock cameras going forward. However, it’s worth noting this is not an absolute win for privacy advocates. Boston police department has already begun pilots with two of Flock's rivals: a Motorola trial began back in February, while an Axon pilot began in June, suggesting it might merely move to a different Automatic License Plate Recognition (ALPR) service.
This also comes as hackers have discovered precisely what Flock cameras track, and it’s not just license plates. Analyzing encrypted data, hackers found the cameras also detect people and bicycles — and they can also pick up and isolate specific bumper stickers.
The fact that the cameras are able to pick up and monitor so much more than some may have realized is worrying enough, but what’s extra concerning is that this data was recovered from a physical camera.
Hopefully Flock will solve this soon, but currently it means anyone with the right hacking skills could tear down a camera and access a chunk of the data stored inside the device — meaning you might not just need to worry about what officials can do with your data
Is there a right way to use ALPR?
For many, the answer to the question of if there’s a right way to use Flock or similar cameras is an emphatic no, but for advocates of the tech, there are sensible measures police departments could be using to minimize abuse.
Sign up for breaking news, reviews, opinion, top tech deals, and more.
Limiting automatic sharing of data to other agencies and restricting the police officers with access are a good starting point. They also argue that all Flock data requests should require case numbers to be attached, and for officers to provide a reason for each request.
Advocates argue this limits the likelihood that bad actors will be able to sneak a peek at Flock data, ensures that accessing ALPR information has a purpose, and creates checks and balances to prevent overreach from law enforcement agencies. As such, many agencies now deploy these methods.
However, some of these practices have been undermined by recent reports. Records obtained by the Electronic Frontier Foundation show that many officers’ reasons for accessing the data include excuses like “LMAO,” “idk lol,” “TBD,” “Sexy,” and similar phrases. Others took to simply smashing their keyboards to fill the form with random letters.
What’s more, in an attempt to make it easier to fill in records but still keep data transparent, Flock introduced prepared options like “Traffic infraction,” though some argue this is a step backwards, as it means officers have even less need to articulate their reasoning for accessing ALPR data — and it really doesn’t help when one option is a generic “Other.”
The EFF reached out to several police departments, and it seems that some have been reprimanded, while others claim department policy has changed since the nonsense reasons were given.
However, even if these forms were filled in correctly, or seemingly correctly, they wouldn’t prevent privacy violations. They’d merely allow someone to possibly audit the data after the fact to spot misuse if the forms were investigated.
That’s why many are saying the best protection — besides pulling down ALPR cameras entirely — is to require a warrant for each search.
Though tearing the cameras down might simply be the best approach, especially after that example above, where it shows ALPR cams see a lot more than we might credit them for, and that some of a camera’s data can be accessed by hackers who know what they’re after.
We’ll need to wait and see how things develop, but Flock’s troubles don’t seem to be ending soon.
Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.
Hamish is a Senior Staff Writer for TechRadar and you’ll see his name appearing on articles across nearly every topic on the site from smart home deals to speaker reviews to graphics card news and everything in between. He uses his broad range of knowledge to help explain the latest gadgets and if they’re a must-buy or a fad fueled by hype. Though his specialty is writing about everything going on in the world of virtual reality and augmented reality.
You must confirm your public display name before commenting
Please logout and then login again, you will then be prompted to enter your display name.