Flock Group Inc.
A nationwide searchable network, sold as a local pole.
Flock Safety is the brand most people mean when they say "the cameras." A hit is a vehicle record: plate image, vehicle image, traits such as make and color, time, and camera location. "Vehicle fingerprint" is Flock's term for extra visual marks. The company's public LPR policy does not describe a named file on every person. Falcon-class LPR units are typically still images of vehicles, not a general CCTV stream. Condor is a separate video product. Do not call every Flock device a video camera.
Product · Local use · Problems
← ALPR hub · Violations · School zones · Q&A
Public group: DeFlock Tampa on Facebook.
01
What the company says it sells
Flock Group Inc. LPR policy, 30 Jun 2026: 7-day rolling hard-delete default; data hosted on AWS Gov; the customer owns the data; the company says it will not sell LPR data for commercial purposes; sharing disabled by default. Those are company claims.
On 13 Aug 2026 CEO Garrett Langley said the default and recommendation changed from 30 days to 7 days. Existing customers keep the window they already approved. Evidence Mode is coming so a saved hit can be held for an active case. MFA, the company said, is now mandatory.
OS Investigate is a Flock-only AI product (WIRED, 19 Aug 2026), in development, not live in Tampa Bay on this site, and not what Axon, Vigilant, or RedSpeed do. See the ALPR hub.
Flock LPR policy, 30 Jun 2026 · Guardrails post, 13 Aug 2026.
02
Local use, as reported
Nothing below is a field census. TPD and HCSO Flock lines are press, a city contract PDF, or the EFF Atlas. They are not an official agency Flock page.
- Tampa PD. Tampa Bay Times: the department said it has 25 Flock cameras. City current-contracts list: 25-X-01691, Flock Safety Group, $43,450.00, through 12/20/2026, marked continuous. That line is a contract entry, not a camera count. See Tampa.
- Plant City. Commission votes in 2024 and 2025 for Flock ALPRs. That is a different contract from Hillsborough school-zone speed cameras. See Plant City.
- HCSO. EFF Atlas lists HCSO as using Flock, citing Plant City Observer reporting. No dollar contract is on this site. HCSO did not answer the Times survey.
- St. Pete PD. Press (including FOX 13 / department statements): 50 Flock cameras, 30-day store as a department claim. Florida Politics reported a 4 Jan 2024 consent vote on Flock Group Inc. The SPPD annual report has also introduced Fleet 3 in-car ALPR (Axon), which is a different product. See St. Pete.
- Pinellas Sheriff. Sheriff Bob Gualtieri told the Times the office uses Flock, Axon, and Vigilant.
- Pasco Sheriff. Times: about 70 Flock cameras. Tampa Bay 28: Undersheriff Chase Daniels said the office is switching some of those roadside units to Axon. In progress, not already gone. See Pasco and Axon.
03
Documented problems, high level
Full receipts live on Violations. This is the short civic version.
- Illinois SOS audit (25 Aug 2025). Official finding that Flock let U.S. Customs and Border Protection reach Illinois plate cameras against state law. Flock said it paused federal pilots. AP covered the pause. That is a state finding plus a company statement, not a court judgment.
- Stolen customer logins and MFA. Sens. Wyden and Krishnamoorthi told the FTC (3 Nov 2025) that at least 35 Flock customer logins appeared in infostealer data and that MFA was still optional for some agencies. Flock later said MFA became mandatory in early Aug 2026. The stolen logins were from customer devices, not a proven break of Flock's core systems. No FTC order was found as of 24 Aug 2026.
- Officer misuse. National press, including the Washington Post, 19 Aug 2026, has reported officers misusing ALPR and Flock systems. This page does not name private officers or addresses.
- CVE-2025-59403. NVD and researchers documented unauthenticated admin functions on some Flock LPR hardware. Separately, some live feeds were later found left open on the public internet. Flock acknowledged limited localized vulnerabilities and submitted issues to MITRE/NVD. This page names the CVE and the public finding. It does not describe ports, passwords, endpoints, or how anyone would reach a device.
Illinois SOS, 25 Aug 2025 · AP · Wyden letter PDF · TechCrunch · NVD: CVE-2025-59403 · Flock security alert · 404 Media on exposed feeds.