CarThreat
  • Home
  • News
  • Features
  • Spotlight
  • Events
  • About
    • Our Mission
    • Services
    • Contact
Notification
  • Autonomous Driving
  • Automotive Ethernet
  • BMS
  • ECU
  • EV
  • ISO/SAE 21434
  • Infotainment
  • OTA Updates
  • OBD-II
  • Pwn2Own
  • RCE
  • SDVs
  • TCU
  • UNECE R155
Cybersecurity

Britain admits 125,000 public chargers have no uniform cyber bar

Cybersecurity

Bosch puts a security gatekeeper on connected motorcycles

Cybersecurity

Trucking group opens a capture-the-flag lab for mechanics

Physical Security

Two California drivers test Axon’s plate database in court

Font ResizerAa
CarThreatCarThreat
  • Home
  • News
  • Features
  • Spotlight
  • Events
  • About
Search
  • Home
  • News
  • Features
  • Spotlight
  • Events
  • About
    • Our Mission
    • Services
    • Contact
Sign In Sign In
Follow US
© 2026 Carthreat.com. All right reserved.
CybersecurityPhysical Security

Deactivated badges did not close Flock database logins

A Washington Post review found accounts left open for years after officers left the job, while some police simply handed their passwords to colleagues elsewhere.

CarThreat Staff
Last updated: October 24, 2026 1:32 am
By
ctadmin
2 Min Read
Anime illustration of an abandoned police cruiser beside a roadside license plate camera at dusk
SHARE

Flock Safety’s cameras photograph a plate, a timestamp and a location for every vehicle that rolls past. A Washington Post review published on October 21 found that the accounts which unlock that archive often outlived the officers who once held them.

The paper counted at least 11 cases where people without authority reached the database, which draws on more than 120,000 roadside cameras.

Four involved credentials still working after a departure or during a suspension. Six others came down to password sharing between agencies, which officials later ruled broke state law, department policy or Flock’s own contracts.

The clearest case is Andrae Wright, who left Georgia’s Effingham County Sheriff’s Office in 2021. His login kept working for five more years. After an internal audit, the Georgia Bureau of Investigation said he ran more than 60 searches between June 15 and July 5 that had nothing to do with police work, including repeats on a vanity plate carrying his wife’s middle name. The couple divorced this year. He now faces stalking, computer invasion of privacy and oath violation charges.

In Indianapolis, a recruit used a senior officer’s still-open session to run more than 1,000 searches on his estranged wife’s plate over twelve months. Five officers were charged there last month after an agencywide audit.

Sharing was routine elsewhere. Covington, Louisiana’s chief discovered a predecessor had opened access to state police and two neighbouring agencies. Cobb County, Georgia found roughly 200 of 900 sheriff’s staff, jailers included, could search, and later cut that to about 50.

Flock made multifactor authentication mandatory in August and plans to force re-login every 12 hours next year.

Join Our Newsletter
Subscribe to our newsletter to get our newest articles instantly!
TAGGED:Access ControlsAccount SecurityALPRAuditingAuthentication BypassData Privacy
SOURCES:The Washington Post via Yahoo News
Share This Article
Facebook Email Copy Link

Follow US

Find US on Social Medias
FacebookLike
XFollow
YoutubeSubscribe

You Might Also Like

Cybersecurity

EcoMotion Panel Explores Self Protecting ECUs as Alternative to Network Security

By
ctadmin
May 22, 2026
Car NewsCybersecurity

Tesla keyless theft vulnerability exposes CAN injection risks across EV fleets

By
ctadmin
July 18, 2026
Cybersecurity

Autocrypt finds two bootloader flaws in a MediaTek chip

By
ctadmin
October 2, 2026
A Flock camera misread put an innocent driver in jail
Physical Security

A Flock camera misread put an innocent driver in jail

By
ctadmin
September 25, 2026
Policy & Compliance

Saxony asks whether its fleet cars broadcast too much

By
ctadmin
October 23, 2026
Cybersecurity

A passwordless port let a researcher command a moving BYD ute

By
ctadmin
September 21, 2026

CarThreat

Intelligence for the EV and automotive security market
  • News
  • Features
  • Spotlight
  • Events
  • About Carthreat
  • Our Mission
  • Services
  • Contact Us
  • OBD-II
  • Automotive Ethernet
  • TCU
  • Infotainment Systems
  • SDVs
  • BMS
  • ECU Security
  • CAN Bus
  • OTA Updates
  • Vulnerabilities
  • Relay Attacks
  • RCE
  • Threat Intelligence
  • Cybersecurity
  • Digital Keys
  • Bluetooth Security
  • ISO/SAE 21434
  • UNECE R155
  • Regulations
  • Data Privacy
  • EVs
  • Autonomous Driving
  • Pwn2Own Automotive

© 2026 Carthreat.com. All right reserved.  Privacy Policy | Legal

Welcome Back!

Sign in to your account

Username or Email Address
Password

Lost your password?