Loading story…
A range of legal and technical measures are being taken to counter the use and abuse of surveillance and data collection technologies by both government agencies and private corporations. In the United States, privacy advocates and hackers are developing counter-surveillance tools to disrupt automated license plate readers (ALPRs) operated by companies like Flock, which supply footage to law enforcement agencies including ICE. These efforts include adversarial license plate overlays that confuse AI recognition systems and open source mapping of ALPR networks. Additionally, a significant security lapse was discovered in Flock's infrastructure, exposing live camera feeds and logs due to misconfigured, publicly accessible admin interfaces. Legal action is also underway, with organizations like the EFF and ACLU suing municipalities over alleged abuses of surveillance technology.
In Texas, a court has issued a temporary restraining order against Samsung, prohibiting the company from collecting smart TV viewing data from consumers without proper consent. The court found Samsung's Automated Content Recognition (ACR) practices deceptive, highlighting concerns about undisclosed data collection and potential access by foreign entities such as the Chinese government. The ruling underscores growing legal scrutiny of pervasive data collection by technology vendors and the opaque enrollment processes that mislead consumers about the extent and use of their personal information. These developments reflect increasing resistance—both technical and legal—to the expansion of surveillance and data harvesting technologies in the US.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
A report on resistance to ICE surveillance technology said security weaknesses in Flock automated license plate reader camera systems had exposed live feeds and administrative interfaces to the public. The article also noted ongoing legal and technical pushback by privacy advocates against ICE's use of surveillance tools.
Following the temporary restraining order, a hearing was scheduled to determine whether a temporary injunction should be imposed on Samsung over its smart TV viewing-data practices in Texas. The outcome could shape broader action against invasive consumer-electronics data collection.
The State of Texas secured a temporary restraining order against Samsung barring it from collecting, using, or transferring audio and visual data from Texas consumers' smart TVs through Automated Content Recognition technology. The court cited allegedly deceptive enrollment flows, lack of transparency, and dark patterns that made meaningful consent and opt-out difficult.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Hidden surveillance devices, such as covert cameras and microphones, are increasingly embedded in everyday objects like smoke detectors, clocks, and USB chargers. Detecting these devices requires careful observation of physical anomalies, such as misaligned fixtures or unusual reflections, and the use of tools like smartphone cameras to spot infrared emissions invisible to the naked eye. Awareness of subtle environmental cues and the physics of light and sound can help individuals identify hidden surveillance threats in both private and public spaces. Automated License Plate Readers (ALPRs) represent another form of pervasive surveillance, capturing and storing detailed information about vehicles and their movements across the United States. These AI-powered cameras, often used by law enforcement, can track a car's route and daily routine, raising significant privacy and data security concerns. Vulnerabilities in ALPR systems have led to data leaks, and the ease of access to these databases by police—sometimes without warrants—highlights the broader risks associated with the proliferation of surveillance technologies in modern society.
Jun 29, 2026
Senator Ron Wyden and Representative Raja Krishnamoorthi have called for a federal investigation into Flock Safety, a company operating the largest network of automated license plate readers (ALPRs) in the United States, citing concerns over negligent handling of Americans’ personal data and inadequate cybersecurity measures. The lawmakers allege that Flock Safety fails to enforce cybersecurity best practices, such as mandatory multi-factor authentication (MFA), leaving customer accounts vulnerable to compromise. Reports indicate that at least 35 Flock customer accounts have been stolen by hackers, and the company’s voluntary authentication does not natively support phishing-resistant MFA. These security lapses have raised fears that hackers or foreign actors could gain access to sensitive location data on millions of Americans, and that law enforcement agencies can improperly share access to Flock’s systems. The controversy surrounding Flock Safety extends beyond cybersecurity, as privacy advocates and local communities have raised alarms about the potential for abuse and invasive tracking through the company’s ALPR network. Some communities have already succeeded in removing Flock cameras, motivated by concerns over wrongful detentions, privacy violations, and the use of Flock data in sensitive investigations, such as those involving abortion patients and undocumented immigrants. Lawmakers argue that Flock’s practices expose Americans to significant risks and have urged the Federal Trade Commission (FTC) to investigate, referencing previous FTC enforcement actions against companies that failed to implement adequate authentication controls.
Jun 29, 2026
Police departments across the United States have used Flock Safety's automated license plate reader (ALPR) cameras to monitor protest activity, according to research by the Electronic Frontier Foundation (EFF). Over a ten-month period, more than 50 federal, state, and local agencies conducted protest-related searches using Flock Safety's national network, targeting events such as the "No Kings" demonstrations, the 50501 movement, and "Hands Off!" protests. The EFF's findings highlight that law enforcement agencies sometimes focused on specific activist groups, raising significant privacy and civil liberties concerns. The report also notes that Flock Safety has lost police department customers following revelations of its technology being used to track undocumented immigrants and individuals seeking abortions. Flock Safety's ALPR systems are designed to scan and photograph every license plate that passes by, storing the data for later searches. While these systems have been credited with aiding criminal investigations, their widespread deployment has sparked debate over the balance between public safety and individual privacy. The growing use of ALPRs, especially by law enforcement to track protestors and other groups, has intensified scrutiny from privacy advocates and the public regarding the potential for mass surveillance and misuse of collected data.
Jun 29, 2026