Flock safety data breach: ventura county license plate reader data shared with federal agencies

Flock safety data breach: ventura county license plate reader data shared with federal agencies

A recent audit has revealed a significant security lapse involving Flock Safety, a company providing license plate reader (ALPR) Technology. The investigation uncovered that Ventura County's sensitive data was inadvertently shared with out-of-state law enforcement, including federal agencies, raising serious concerns about data privacy and security. This incident highlights the critical need for robust safeguards in the deployment of increasingly prevalent surveillance technologies.

Unauthorized data access: a concerning pattern

The audit indicated that out-of-state agencies accessed the Ventura County Sheriff's Office's data over 364,000 times between February and March of last year. Alarmingly, this access occurred without the department's explicit approval or knowledge. While deputies cited 299 justifications referencing immigration enforcement – a small fraction of the total searches – the sheer volume of unauthorized access is deeply troubling. The incident underscores potential vulnerabilities in the security protocols surrounding ALPR data.

The 'national lookup' feature: a point of contention

In an effort to address privacy concerns, the Ventura County Sheriff's Office deactivated Flock's "National Lookup" feature in June 2023, aligning with California law that restricts sharing ALPR data with out-of-state entities. However, just earlier this month, deputies discovered that several California law enforcement agencies reported the feature had inexplicably reactivated. This reactivation, occurring without explanation, has thrown the Sheriff's Office into a reactive mode, initiating a comprehensive investigation.

Flock's response and internal review

Upon discovering the audit results, the Ventura County Sheriff's Office immediately contacted Flock Safety. The company reportedly informed the agency that other agencies had experienced similar issues, and that technical limitations prevented them from pinpointing the cause. The Sheriff’s Office has since conducted an internal investigation and concluded that no personnel within their agency were responsible for reactivating the feature. This finding, however, doesn't alleviate the severity of the data breach.

Enhanced safeguards and vendor evaluation

In response to the breach, the Ventura County Sheriff's Office has implemented enhanced internal safeguards, including daily audits to independently verify system settings and access logs. Flock Safety has also pledged internal improvements to prevent future occurrences and has assured the department that it has no contracts with ICE or any sub-agency of the Department of Homeland Security. Furthermore, Flock has stated it has blocked federal agencies from engaging in data sharing relationships with California law enforcement.

The future of alpr technology in ventura county

The incident has prompted Ventura County to explore alternative vendors for its ALPR system. The Sheriff’s Office emphasized that ALPR Technology remains a vital tool in combating crime, but the security breach highlights the necessity of prioritizing robust security measures and accountability. "Proper guardrails must not only be in place, but they must work reliably," stated Oxnard Police Chief Jason Benites, who reported suspending the use of Flock readers in his department following the news. This incident is likely to spark broader conversations about data privacy and the responsible use of surveillance Technology across the nation.