Authorities in St. Lucie County, Florida, identified 14 Flock vehicle-tracking cameras operating without required permits after a mandate to remove the devices from county roads. The St. Lucie County Sheriff’s Office claimed three, leaving 11 without an identified owner, according to Ars Technica. The sheriff’s office did not explain why it had not obtained permits or whether it accessed recordings from its cameras. The discovery raised questions about who operated the remaining devices and who could access the sensitive vehicle-location data they collected.
The findings come amid reported misuse of Flock databases by Florida police officers for personal surveillance, including stalking, and criticism that the company’s safeguards are inadequate. Security commentator Bruce Schneier highlighted the unidentified cameras as an example of surveillance infrastructure that could be exploited by friendly or hostile actors, drawing a parallel with unidentified StingRay devices in Washington, DC. A local government operator was suggested as a possibility, but remains unverified; neither report establishes a Flock network compromise or foreign involvement. The immediate concern is accountability for camera ownership, deployment authorization, and access to collected data.

See the reporting duties and controls this puts on the clock.
9 events from the most recent confirmed update back to the earliest known activity.
The St. Lucie County Sheriff’s Office claimed ownership of three discovered cameras. It did not explain why required permits had not been obtained or clarify whether it had accessed the cameras’ recordings.
Authorities discovered unpermitted Flock cameras in St. Lucie County; Ars Technica reported 14 cameras, including 11 with no obvious owner. Their unidentified ownership raised concerns about who controlled the systems and could access vehicle-location data.
A mandate required the removal of Flock vehicle-tracking cameras from roads in St. Lucie County, Florida, prompting authorities to identify unpermitted installations.
Flock said it had added safeguards intended to prevent misuse of its databases. Experts cited in the report warned that those safeguards were ineffective.
The Washington Post identified at least 50 similar cases of police misuse of Flock systems across the United States.
Pinellas County officer Karl Gwynne was arrested in connection with invasive Flock tracking. He was accused of using the system to stalk a woman he wanted to date.
Pinellas County officer Travis Stanton was arrested in connection with invasive Flock tracking. He was found to have searched for a minor using the tracking systems.
Officer Christopher Goodson reportedly conducted nearly twice as many Flock database searches as Crutchfield while searching for his estranged wife.
Fort Pierce officer Josepher Crutchfield accessed a Flock database 382 times while stalking an ex-girlfriend.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See what this changes for your reporting obligations and which controls it puts on the clock.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.