DEV Community

Cover image for Nobody Owns These Cameras: The Security Problem Hiding on America's Public Roads
Yano.AI Technologies Inc.
Yano.AI Technologies Inc.

Posted on Originally published at yanoai.tech

Nobody Owns These Cameras: The Security Problem Hiding on America's Public Roads

Last month, a county employee in Florida walked a stretch of public road and counted fourteen cameras that nobody had authorized. Three belonged to the sheriff's office. The other eleven had no publicly identified owner, no permit on file, and no agency that could answer the question commissioners cared about: who can search what these devices recorded (Source: WPEC/CBS12, 2026; Gadget Review, 2026).

Infographic

Atlanta-based Flock Safety says it operates more than 120,000 of these devices nationwide (Source: Flock Safety, 2026). At that scale, the question is no longer whether the cameras exist. It is whether anyone can account for the ones nobody claimed.

The pattern repeats across states

The Florida discovery is not an isolated municipal failure. Local officials have documented unaccountable installations in multiple states, including cameras going up in Cambridge, Massachusetts after the city had already deactivated its system, and a camera on city property in Millcreek, Utah that neither the city nor its police could attribute to an installer (Source: Gadget Review, 2026).

The sequence matters more than any single incident. A 2024 Forbes investigation reported that Flock had installed cameras across multiple states without required permits, including Florida (Source: Forbes, 2024). Devices appear on infrastructure before the authorization paperwork does, and that gap is where accountability evaporates. Cameras went up on the John's Pass Bridge near St. Petersburg in 2023 without required state approval, and came down only after regulators asked (Source: Gadget Review, 2026).

What the state knew, and when

Florida's Department of Transportation eventually did check. On August 31, 2026, FDOT revoked ALPR permits for devices within state highway rights-of-way, giving agencies 30 days to remove them (Source: WUSF, 2026). The memo cited a "recent exponential increase in deployments along our roadways, couple[d] with concerning reports of misuse, data privacy concerns, and surveillance schemes [that] merit immediate action" (Source: FDOT, 2026).

Governor Ron DeSantis had framed it publicly a week earlier at Florida International University: "I don't want to have this become a surveillance state" and "It's going to get a lot worse unless we have some protections for the people in Florida" (Source: WUSF, 2026).

Because the memo is effectively an executive order, the next Florida governor could let these installations return. DeSantis himself said the fix has to be legislative (Source: WUSF, 2026).

A permit is an identity record

In St. Lucie County, staff could not identify an applicant to contact because no permit existed. The county posted removal notices directly onto the devices, and interim county administrator Mayte Santamaria said staff "will also bag the cameras so they're not operable" (Source: WPEC/CBS12, 2026).

Commissioner James Clasby put the risk plainly: "There's the potential for non-law enforcement to have cameras out there, and I'm not okay with that" (Source: WPEC/CBS12, 2026). Staff confirmed the unpermitted count climbed from three on September 10 to at least fourteen a week later, and the search was unfinished (Source: WPEC/CBS12, 2026).

A permit is not bureaucracy for its own sake. It is the only durable link between a physical device and the account that controls its data. Without it, nobody can say who authenticated the searches, what retention rules apply, or whether the camera still transmits.

The accountability gap has already been exploited

Unclaimed is not the same as unused. A Washington Post investigation found at least 50 law-enforcement officials nationwide accused of misusing Flock systems to track people in their personal lives (Source: Washington Post, 2026).

One case shows what unaudited access looks like. Former Fort Pierce officer Josepher Crutchfield was jailed after accessing the Flock database 382 times to monitor his former girlfriend off duty (Source: Gadget Review, 2026). The thread through these cases is not malice in the abstract. It is the absence of a routine question that would have caught it early: who is this account, and who checks what it searches?

The ratio problem

Raw volume tells its own story. In Elkton, Virginia, the town's transparency portal showed cameras logging 55,031 unique vehicles over 30 days. Seventy-six triggered a hotlist hit, and officers ran three searches: a 0.14 percent hit rate, meaning 99.86 percent of logged vehicles had no law enforcement relevance (Source: Flock Safety Transparency Portal, 2026).

Meanwhile Elkton had spent $23,300 on a contract signed by the town manager with no council vote, no public notice, and a purchase order field marked "NA". A FOIA request eventually produced 353 pages of records (Source: Augusta Free Press, 2026).

What fixes it

The St. Lucie approach treats this as asset provenance rather than a privacy debate. The county compared crowdsourced data against known device locations to find installations nobody had registered, and commissioners voted 3-2 on September 1 to stop issuing permits on county property, going beyond the state order (Source: WPEC/CBS12, 2026).

Neither action reaches private property, and Flock spokesperson Paris Lewbel said permitting rules vary by jurisdiction and are not always required (Source: Gadget Review, 2026). Coordinating with a county after cameras are already running reverses the order that matters.

Three requirements would close most of the gap. File public permit records before installation, not after a field check finds the device. Require customer identity disclosure for anything on public infrastructure. Mandate auditable access logs so an official can answer, specifically, who searched what and when.

FAQ

Who owns the unclaimed cameras in St. Lucie County?
Three belong to the sheriff's office, which has not explained the missing paperwork. The other eleven have no publicly identified owner, and officials do not know whether those cameras are still active or who can search what they captured (Source: Gadget Review, 2026).

How many Flock cameras operate in the United States?
Flock Safety, the Atlanta-based vendor, says it operates more than 120,000 cameras nationwide, each logging plates with time and location into a searchable cloud database (Source: Flock Safety, 2026).

Does the FDOT permit revocation cover private property?
No. The August 31, 2026 memorandum applies strictly to state highway rights-of-way, not to privately operated readers on commercial property, private developments, or vehicle-mounted units (Source: WUSF, 2026).

Can a county actually remove these cameras?
Partly. Staff post removal notices directly on the devices and "bag the cameras so they're not operable." But with no permit on file, they cannot identify an applicant to contact, so enforcement starts from a blank record (Source: WPEC/CBS12, 2026).

Key Takeaway

Every device on public infrastructure should have a named owner, a permit filed before it goes up, and logs someone is required to check. Florida found fourteen cameras on one county road only because a commissioner read an agenda report, and the count was still climbing when the story ran (Source: WPEC/CBS12, 2026).

The cameras are not the anomaly. The missing paperwork is. If a network can grow past 120,000 devices nationwide while some fraction have no attributable owner, the failure is not careless municipalities. It is an authorization model that does not scale with deployment.

So: when was the last time anyone in your community asked which agency is behind the cameras on your street, and who holds the account that can search them?

Sources

Top comments (0)