Flock camera map exposes locations of more than 170,000 devices
A researcher mapped more than 170,000 Flock cameras from archived company data after finding an unauthenticated access token. Flock later appeared to fix the vulnerability, but the map’s removal is now being pursued.
By DoomRadar · Published on DoomRadar . Updated .
Based on one source with available article excerpts. Source-linked claims are not independent confirmation.
Event date: The researcher downloaded the device-location data in December 2025, after identifying the exposed access token in November 2025. [1]
What happened
A cybersecurity researcher’s map used location coordinates from a December 2025 snapshot of Flock’s own records. The map showed more than 170,000 cameras across the United States, exceeding Flock’s publicly stated figure of more than 120,000 cameras. [1]
References for this detail (1)
- Flock Wants the Most Detailed Map of Its Cameras Taken Downtheintercept.com · Article published: Sep 24, 2026, 11:21 PM UTC
The map also displayed more than 130,000 accompanying devices. These included roughly 27,000 acoustic detection devices and networking equipment used to integrate third-party cameras into the wider surveillance network. [1]
References for this detail (1)
- Flock Wants the Most Detailed Map of Its Cameras Taken Downtheintercept.com · Article published: Sep 24, 2026, 11:21 PM UTC
The researcher said the locations became accessible through an access token exposed by Flock’s servers without requiring login. He said his testing used open unauthenticated endpoints and did not bypass authentication or alter data. [1]
References for this detail (1)
- Flock Wants the Most Detailed Map of Its Cameras Taken Downtheintercept.com · Article published: Sep 24, 2026, 11:21 PM UTC
The researcher said he contacted Flock on November 13, 2025, but initially received no reply. After he downloaded the location data in December and published a technical post in January, Flock appeared to fix the vulnerability. [1]
References for this detail (1)
- Flock Wants the Most Detailed Map of Its Cameras Taken Downtheintercept.com · Article published: Sep 24, 2026, 11:21 PM UTC
Context from the sources
Flock told the press during the summer that it operated more than 120,000 cameras nationwide, while the later map indicated a substantially larger network and included supporting equipment. [1]
Explore the sources and reporting timeline
1 source links · 1 domains
These counts describe the references, not independent confirmations. Different outlets can repeat the same original report.
Source timeline
Oldest to newest among the available source dates, not a chronology of the incident. Article publication dates come from the source; other recorded dates may reflect when a link was found.
- [1] Flock Wants the Most Detailed Map of Its Cameras Taken Downtheintercept.comReferenced for: detail 1, detail 2, detail 3, detail 4
Questions answered by the reporting
What did the map include beyond cameras?
It also mapped more than 130,000 associated devices, including about 27,000 acoustic detection devices and networking equipment linked to third-party cameras. [1]
What this could mean for you
People may be able to identify surveillance-device locations more precisely than before.
Publicly exposed coordinates can reveal where cameras and associated sensors are installed.
Reported basis: [1] · The possible effect is interpretation.
Depends on: The archived map or equivalent location data must remain accessible.
Public agencies and operators may need to review access controls around connected surveillance systems.
An unauthenticated token allowed queries of location data held through a third-party geographic information platform.
Reported basis: [1] · The possible effect is interpretation.
Depends on: Similar unauthenticated access paths remain in connected systems.
Possible consequences, not a forecast. Their relevance depends on your location and the conditions above.
For your country
Choose a country to check how this event could affect you.
What changes the outlook
Risk increases if…
The archived map remains available or is copied elsewhere.
Other unauthenticated access paths are found in connected surveillance systems.
Pressure eases if…
Flock’s apparent fix prevents unauthenticated retrieval of the location records.
The map is removed and archived copies are no longer accessible.
Still unclear
It is unclear whether the archived map remains publicly accessible after Flock sought its removal.
The reporting does not establish whether the exposed data was accessed by anyone other than the researcher or whether specific locations were misused.
Market implications
Market impact
Sources (1)
References for the reported details. Separate links do not necessarily mean independent confirmation.
Available excerpt
A security researcher’s map revealed more locations of Flock devices than any other. Flock is trying to take it down. Amid mounting concerns about its…A short excerpt from our source record; open the original for the full article.
AI-assisted analysis · . Based on linked headlines and available excerpts. Methodology · Report an error.