One company put an always-on license-plate camera on tens of thousands of American streets, sold it to thousands of police departments, and became the location layer of a nationwide surveillance apparatus, feeding ICE, CBP, the Secret Service and the Navy through a side-door it says it never opened. This is the file. Every claim in it is graded and sourced.
In the fall of 2025, someone in Eugene, Oregon climbed a utility pole, cut down a small gray camera aimed at the road, and left a note behind: "Hahaha get wrecked ya surveilling f***s." Six cameras came down in that stretch alone. A few months later a 41-year-old Air Force engineer in Virginia was charged with 13 felonies for allegedly doing the same to 13 of them. Across at least five states, people have started tearing these cameras out of the ground.
To understand why ordinary Americans are risking felony records to destroy a piece of street furniture, you have to understand what the camera is. It is a Flock Safety automated license-plate reader, and there are somewhere between 80,000 and 90,000 of them watching American roads. This Case File does not claim the cameras were built to do harm. It asks a narrower question: who can reach what they collect, and what has that access actually been used for?
Flock does not sell a security camera in the way a doorbell company does. It sells access to a searchable, nationwide record of where cars have been. Each camera photographs every passing plate, reads it, notes the make, model, color, and identifying marks, timestamps it, and uploads it to a central database that thousands of police departments can query. Flock's own marketing once put the throughput at up to 500 million scans a month across its "TALON" network. Point that at a single plate and you can reconstruct where a person drives, when, and how often.
Sold one town at a time as a tool against carjacking and for finding missing kids, it quietly assembled into something no single town approved: a continent-scale movement log, pooled and cross-searchable.
Read the map left to right. Flock sells to local police, who own the records and become the door every other agency walks through. The severed line to Palantir is the connection people assume exists and the record does not support (more on that below).
Here is the part that turned a privacy complaint into a national story. Flock says it has no contract with Immigration and Customs Enforcement. That is technically true and beside the point. Because local police own their camera data and can share their access, federal agencies simply ask them to run the searches. Reporting by 404 Media, working from Flock's own audit logs, found more than 4,000 nationwide or statewide lookups run by local and state police on behalf of federal agencies or with an immigration focus. Officers did not hide it. They typed their reasons into the search box:
"immigration" · "ICE" · "ICE+ERO" · "illegal immigration" · "ICE WARRANT"
Search-reason entries logged by local officers running Flock queries for federal agencies. Source: Flock audit logs obtained by 404 Media.
It went further up the chain. Customs and Border Protection regularly searched more than 80,000 Flock cameras, according to data released by three police departments; one of those departments said it did not know it was sharing with CBP at all. A letter from Senator Ron Wyden later revealed that Homeland Security Investigations had run nearly 200 searches, and that the Secret Service and the Navy's criminal investigators had access to the network too. Flock's response, in August 2025, was to announce it had "paused all federal pilots," which was also the first public confirmation those pilots existed.
Wyden's assessment was blunt. He told Flock that abuses of its product were "not only likely but inevitable," that the company was "unable and uninterested in preventing them," and recommended that local officials pull the cameras out entirely.
In May 2025, a sheriff's official in Johnson County, Texas ran a search across the Flock network for a woman. The logged reason was plain: "had an abortion, search for female." The first query reached back a week across 1,295 networks and 17,684 cameras. The second expanded to a full month across 6,809 networks and 83,345 cameras, including cameras in Washington and Illinois, where abortion is legal.
Flock called the story "unequivocally false" and its CEO called it "really good clickbait." Then the Electronic Frontier Foundation obtained the sheriff's own records. Both incident reports were marked "death investigation." The lead detective described himself working "a death investigation of a non-viable fetus," and both plate searches carried that case number. Detectives had asked the district attorney whether they could charge the woman for taking the medication. The "welfare check" framing did not survive contact with the paperwork.
"You have this extraterritorial reach into other states... police in one state can investigate what is a human right in another."
Kate Bertash, Digital Defense Fund.
The abortion case is the sharpest example, not an outlier. The Institute for Justice has documented at least 21 cases of officers using plate-reader data to stalk romantic partners, most since 2024. In one, a Milwaukee officer allegedly tracked his partner and that partner's ex nearly 180 times in two months. Here is the detail that matters most: almost none of these were caught by Flock's internal safeguards. Victims found them, usually while checking their own plates on a watchdog site.
For a system holding this much, the security is poor. In late 2025, researchers found at least 60 Flock cameras streaming live to the open internet with no username, no password, and no encryption. Anyone with a browser could watch the feeds, pull 30 days of archived video, change settings, and delete footage. Separately, senators told the FTC that Flock does not require basic two-factor login for police, that at least 35 customer accounts had their passwords stolen, and that Flock login credentials were being sold on Russian cybercrime forums.
The irony writes itself. When the mapping project DeFlock noted that plate readers can be hacked, Flock's lawyers complained that discussing its security flaws amounted to false advertising. The flaws were real. Independent researchers proved them a few months later.
Rather than answer the criticism, Flock has tried to silence it. In January 2025 the company sent a cease-and-desist letter to Will Freeman, the creator of DeFlock.me, the crowdsourced map of camera locations, demanding he stop using the name "DeFlock" and stop implying the cameras were insecure. The legal theory was trademark dilution, not a claim that anything he said was untrue. EFF took his case, called the demand groundless, and Flock backed off without suing.
The company also tried to knock a second site offline: HaveIBeenFlocked.com, which lets you check whether your own plate has been searched. It was built from police audit logs that departments released, unredacted, through public-records requests, exposing 2.3 million plates and tens of millions of searches. Flock had a third-party firm file intellectual-property complaints with the site's hosts. Cloudflare declined, citing insufficient evidence. Researchers who merely reported the vulnerabilities describe cease-and-desist threats and police showing up at their homes.
The camera-cutting is the loud part. The effective part is quieter. Since the start of 2025, roughly 30 localities have paused or canceled their Flock contracts. DeFlock has mapped close to 80,000 cameras and lists dozens of local groups organizing against them. EFF and the Institute for Justice are running Fourth Amendment challenges in court. The honest version of the ladder is uncomfortable: the tactics that carry the least personal risk are the ones that actually work.
IMPACT = effect on the surveillance network · RISK = personal legal exposure. The safe row is the effective one. This file documents tactics and their consequences; it endorses none of them.
Online, the story often gets pulled toward Palantir, the data-mining firm that builds ICE's case-management and deportation-targeting software. It is worth being precise, because the truth is narrower than the rumor. Flock says flatly that it does not work with Palantir, and the detailed reporting on Palantir's ICE contracts does not mention Flock. The two are not partners. What they share is a customer. Flock supplies the location layer, where a car was seen; Palantir supplies the targeting layer, who to go after. They meet at ICE, not at each other. Inflating that link only makes the real, documented story easier to dismiss.
The Decrypted Matrix does not assert that Flock set out to build a deportation engine or a stalking tool. The honest claim, narrower and stronger than the conspiratorial frame, is this:
Flock built a searchable national record of where cars go, sold the keys to thousands of police departments with weak security and thin oversight, and the record shows that access being borrowed by federal agencies and pointed at people for conduct that is legal where they live.
That claim rests on primary documents, Flock's own audit logs and statements, and named reporting from 404 Media, EFF, the ACLU, the Institute for Justice, and U.S. Senate oversight. It does not require speculation. It also does not let anyone off the hook.
The cameras deliver real hits on stolen cars. They also hand a map of everyone's movements to whoever holds the login. A growing number of towns are deciding that trade is not worth it.
Filed · Mass-Surveillance Series · Companion to Scalia