# Flock Safety and ALPR Surveillance: Timeline Hub: [[Topics/Flock Safety and ALPR Surveillance/Flock Safety and ALPR Surveillance|Flock Safety and ALPR Surveillance]] · [[Topics/Flock Safety and ALPR Surveillance/Sources|Sources]] Dates without times are as published. Times are CT. | Date | Event | Source | |---|---|---| | Jul 16, 2025 | Michael writes up a misconfigured Flock demo that exposed an 83,000-camera tracking system | [Nexanet](https://nexanet.ai/blog/misconfigured-demo-exposed-flock-safetys-83000-camera-nationwide-tracking-system) | | Oct 2025 | Flock announces its Raven acoustic sensors will also listen for "human distress" such as screaming | [EFF](https://www.eff.org/deeplinks/2025/10/flocks-gunshot-detection-microphones-will-start-listening-human-voices) | | Nov 13, 2025 | Michael reports the pre-login token exposure to Flock. Follow-ups Nov 14 and 19. Flock replies once that it is "internally triaging" | The Intercept (via [IwPost](https://iwpost.com/flock-wants-the-most-detailed-map-of-its-surveillance-cameras-taken-offline/)); [Tom's Hardware](https://www.tomshardware.com/tech-industry/cyber-security/flock-seeks-to-have-security-researchers-map-of-flock-cameras-taken-down-unauthenticated-flaw-exposed-335-701-camera-locations-nationwide) | | Dec 12, 2025 | Michael publishes "Dark Data" (Nova) | [whoisjoshuamichael.com](https://whoisjoshuamichael.com/) | | Dec 14, 2025 | Michael exports 335,701 device and deployment records using the exposed credentials. He does not tell Flock he kept them | [The Auto Wire](https://theautowire.com/2026/10/02/flock-surveillance-map-trademark-complaint-researcher/) (from his paper) | | Jan 2026 | The exposure is fixed (per Tom's Hardware) | [Tom's Hardware](https://www.tomshardware.com/tech-industry/cyber-security/flock-seeks-to-have-security-researchers-map-of-flock-cameras-taken-down-unauthenticated-flaw-exposed-335-701-camera-locations-nationwide) | | Jan 6, 2026 | Flock posts "Has Flock Been Hacked? No…" ("never experienced a data breach"). Updated Jul 24, 2026 ⚠️ (now 404) | [The Auto Wire](https://theautowire.com/2026/10/02/flock-surveillance-map-trademark-complaint-researcher/) | | Jan 9, 2026 | Michael publishes "53 Times Flock Safety Hardcoded the Password…" (an ArcGIS key in 53 files) | [Nexanet](https://nexanet.ai/blog/53-times-flocksafety-hardcoded-the-password-for-americas-surveillance-infrastructure) | | Jul 2026 | Flock ends the rollout of audio "distress" detection | [EFF](https://www.eff.org/deeplinks/2026/07/victory-flock-ends-rollout-audio-distress-detection-human-voices); [The Record](https://therecord.media/flock-safety-kills-audio-detection-system-human-distress) | | Sep 2, 2026 | Date of Michael's formal disclosure paper | [The Auto Wire](https://theautowire.com/2026/10/02/flock-surveillance-map-trademark-complaint-researcher/) | | Sep 23, 2026 | Michael publishes the map at flocksurveillance.org. The Senate Judiciary crime subcommittee (Hawley) holds a Flock hearing the same day, where Benn Jordan's testimony cites Michael | [Hearing Highlights](https://hearinghighlights.com/hearings/119/senate/senate-judiciary-subcommittee-on-crime-and-counterterrorism/2026-09-23/hearings-to-examine-flocks-nationwide-ai-surveillance-network); [testimony](https://www.judiciary.senate.gov/imo/media/doc/b54507b1-a8f4-8ea9-424e-097b9a9a8700/2026-09-23-PM_Testimony_Jordan_50543647-748c-41d2-a48a-090e5546c226.pdf) | | Sep 24, 2026 | Doppel files a trademark complaint against flocksurveillance.org. The Intercept (Nikita Mazurov) reports the story | [FIRE](https://expression.fire.org/p/flock-is-using-trademark-law-to-silence); The Intercept (mirror) | | Sep 25, 2026 | Flock's attorney sends a cease-and-desist alleging unauthorized access, with a deadline of Sep 28, 5 PM ET. Michael posts "Flock Threatens to Sue and Reports Me to Law Enforcement" | [Dispute Index](https://disputeindex.com/events/5080-flock-s-letter-argues-that-michael-s-alleged); [whoisjoshuamichael.com](https://whoisjoshuamichael.com/) | | Sep 28, 2026 | The map is still online after the deadline | [The Auto Wire](https://theautowire.com/2026/10/02/flock-surveillance-map-trademark-complaint-researcher/) | | Oct 21, 2026 | Cybernews reports Proton hosting its own copy of the map (updated Oct 22) | [Cybernews](https://cybernews.com/tech/proton-flock-map/) | | Oct 22–23, 2026 | Coverage spreads: @IntCyberDigest (Oct 22, 9:03 PM CT), The Verge (Oct 23, 11:52 AM CT) | [X](https://x.com/IntCyberDigest/status/2113451088913310013); [The Verge](https://www.theverge.com/tech/1017639/proton-map-flock-cams) | | Oct 24, 2026 | @cyber_razz's post (3:45 AM CT) with a dead link, corrected at 2:23 PM CT. Tom's Hardware reports the original map is still up but US-only | [[Users/@cyber_razz/Post Analyses/Post Analysis - cyber_razz on Flock, Joshua Michael's Map and Proton (2026-10-24)\|analysis]]; [Tom's Hardware](https://www.tomshardware.com/software/maps/proton-hosts-flock-map-revealing-over-300-000-cameras-defying-cease-and-desist-threats-against-creator-privacy-focused-company-hosts-site-on-swiss-servers-says-users-have-the-right-to-know-whos-recording-them) | ⚠️ Proton's page says Michael published "his own map in December" [2025]. Michael's site and The Intercept date the map to Sep 23, 2026.