Archive — US — techcrunch
Lawmakers say stolen police logins are exposing Flock surveillance cameras tohackers
Lawmakers have urged the FTC to investigate Flock Safety for not enforcing multi-factor authentication (MFA) on its surveillance camera network, putting sensitive police logins at risk of hacker access, potentially exposing a vast database of license plate data collected from across the U.S. Flock claims 97% of its law enforcement customers use MFA, but around 3% have not implemented the security feature.
Key points
- Lawmakers Sen. Ron Wyden and Rep. Raja Krishnamoorthi expressed concerns about cybersecurity at Flock Safety.
- Flock does not enforce mandatory MFA, despite offering it to law enforcement customers.
- If hackers access law enforcement accounts, they can search a vast database of license plates.
- Evidence suggests some law enforcement logins have been stolen and circulated online.
- Flock reports that 97% of its law enforcement customers have enabled MFA by choice, leaving around 3% without it.
Why it matters
- The issue highlights ongoing concerns about cybersecurity for critical infrastructure and data.
- This incident parallels increasing security breaches in technology companies, emphasizing the importance of robust authentication measures.
- By 2025, trends indicate that multi-factor authentication will be crucial for protecting sensitive data amidst increasing cyber threats.
The lack of mandatory MFA at Flock Safety raises significant concerns about the cybersecurity of sensitive law enforcement data, underscoring the need for stricter security measures in technology that intersects with public safety.