Another day, another Flock security Same shit differe Following up on the post from
earlier today, where I published a complaint to the Iowa Department of Public Safety documenting
multiple security vulnerabilities in Flock products, Joshua over at
nexanet.ai published hard evidence of what we all suspected:
(If the site doesn’t work well for you, try your browser’s “reader” mode)
Flock made a public statement on May 30, 2025. It is still on their website, titled “Correcting the Record: Flock Nova Will Not Supply Dark Web Data.” In it, the company wrote:
Following the lengthy, intentional process described above, we have decided that Flock Nova will supply the following data sources: public records information, Open-Source Intelligence (OSINT), and License Plate Reader (LPR) data. The Flock Nova tool can also enable agencies to connect their Records Management Systems (RMS), Computer-Aided Dispatch (CAD), and data from jail systems, as well as all of the above from other agencies who agree to share that data.
The policy decision was also made that Flock will not supply dark web data. This means that Nova will not supply any data purchased from known data breaches or stolen data.
Joshua now writes that:
The Nova codebase suggests a very different story. Nova’s front end defines, fetches, stores, and displays a data source explicitly named Dark Data, with selectors for extremely sensitive identifiers like Social Security Numbers, credit card numbers, crypto wallets, IP addresses, usernames, and more.
How much more will it take to finally get our elected officials to hold police and Flock accountable for betraying the public’s trust?
Read the full article on Nexanet.ai.
To be clear, as this type of “click this link” article is unusual for this website: this is not a paid or a promotional/affiliate link, and haveibeenflocked.com is in no way affiliated with Nexanet.