← Back to all free security checks
PRIVACY — FLock ALPR · SEPTEMBER 2026 WAS A ROUGH MONTH

Your license plate is searched, not just seen — check it — a data breach news privacy check

Have I Been Flocked? is a free checker that searches released Flock audit logs for your license plate — Flock's cameras sit in 6,000+ U.S. communities and customers have run 243 million searches. This data breach news check shows whether a human searched for you, not just scanned you.

— Ingenious AI security check.

Was your plate searched in this data breach news story?

Being scanned is passive — being searched means a human typed your plate into a system and gave a reason. The audit logs make some of those searches visible, and a camera hack proved the 'encrypted on device' claims wrong. Enter your plate below to check the released logs.

What is ALPR?

Automatic license-plate recognition — cameras that photograph every passing plate — whose databases turn passive scanning into searchable tracking when humans query them.

Flock's license-plate cameras sit in 6,000+ U.S. communities — and its customers have run 243 million searches that we know of. A free checker (Have I Been Flocked?) lets you search released audit logs for your own plate: dates, departments, and the operator's stated reason. Then September 2026 happened: hackers pulled a camera off a pole and recovered its encryption key, and Flock itself disclosed a device-location data theft. Five questions on your exposure.

Short answer: being scanned is passive — being searched means a human typed your plate into a system and gave a reason. The audit logs make some of those searches visible, and a camera hack proved the "encrypted on device" promise had limits. Run the plate check, then answer the five.

The 60-second plate check (free, no account)

  1. Open haveibeenflocked.com — no account, no email, no sign-in.
  2. Go to “Check Your License Plate” and type your plate exactly as printed. If no match, retry once with the obvious alternate formatting (spaces/punctuation).
  3. Review every returned record: search date/time, agency/organization, stated reason, plus search type, filters, case number, operator name/ID where released.
  4. Screenshot the row. A match is a record that an operator queried your plate — not proof you were stopped, accused, or investigated.

The site says your plate is checked against its own database of public-record logs — not sent to a third party — and it does not log the plates you enter.

The 60-second Surveillance Exposure Check

Answer for your household.

Share your result:

What happened to Flock in September 2026 — verified

WhenWhat
Sep 16, 2026Camera hack (WIRED + 404 Media): the "stegan0gram" collective physically removed a Flock camera, copied its on-device storage, and recovered an encryption key that unlocked 27,321 video clips and ~1.6 million still images of ~50,200 vehicles. Recovered files showed on-camera software that detects people as well as vehicles. Flock called the removal illegal.
Sep 22, 2026Device-location theft: Flock notified customers that a malicious actor published a website with customer device location data (device name, location, device type, accurate as of Dec 2025), unlawfully accessed and exfiltrated from a third-party map service. Flock said no LPR images, video, or CJIS data were exposed.
Sep 22, 2026Bishop Fox pen test published: 36 findings across hardware, software, and cloud; 2 Critical + 6 High, all remediated and independently verified; most Mediums remediated.

Sources: Have I Been Flocked? · Footnote4a (Bishop Fox + breach) · Flock Bishop Fox results (GlobeNewswire)

Three things the checker can't do

1. A no-match is not a clean bill of health

It shows released search records, not camera captures. Your car may have been scanned thousands of times with zero log entries released.

2. "Search type" matters more than it looks

A "Lookup" search can mean a broader network query across agencies with sharing relationships — not just one department's cameras.

3. The operator's "reason" is a claim, not a verdict

The reason field is whatever the operator typed. It is not independent proof the reason was correct or that you were involved in anything.

FROM INGENIOUS AI
BreachHunter finds the exposures attackers see first — from breached cameras to leaked databases, know what the world knows about you.
All 11 platforms: DisclosureGuard  ·  ModelMinder  ·  TermsWatch  ·  Vibe-Code Audit  ·  Rogue-Agent Defense  ·  BreachHunter  ·  ChatBreaker  ·  Agent Flight Recorder  ·  Agent Auth Gateway  ·  DomainGuard  ·  ContentCraft AI
Our platforms are being upgraded and return November 1 — get early access now:
Get early access on WhatsApp →
Share this check: XLinkedInReddit

FAQ

What is Have I Been Flocked?

A free public checker at haveibeenflocked.com that lets you enter a license plate and search it against publicly released Flock ALPR audit logs collected from government records — showing the dates, departments, and operator-supplied reasons for searches of that plate. No account or email required, and the site says it does not log the plates you enter.

What happened to Flock Safety in September 2026?

Three events: (1) on Sept 16, WIRED and 404 Media reported that a hacker collective physically removed a Flock camera, copied its storage, and recovered an encryption key unlocking ~27,000 video clips and ~1.6 million still images; (2) on Sept 22, Flock notified customers that a malicious actor had published a website with customer device location data (device name, location, device type) exfiltrated from a third-party map service; (3) also on Sept 22, Flock published its 2026 Bishop Fox penetration test: 36 findings, all critical and high issues remediated and verified.

Does a 'no match' on Have I Been Flocked mean my car was never scanned?

No. The checker shows only released records of searches — instances where someone queried the Flock database for a plate. It does not show every time a camera captured your vehicle, and the collection is incomplete: records can be redacted and can arrive months or years after the underlying search.

What can I do if my plate appears in a search log?

Save the row (date, organization, reason, case number, search type), then file a focused public-records request with the named agency for the underlying audit logs in original electronic format (CSV/Excel). You can also submit obtained records to the project's Submit Audit Logs page so they can be verified and added to the searchable collection.

Related checks