A security researcher discovered that Flock Safety, which operates one of the largest surveillance networks in the US with cameras generating 30 billion vehicle detections monthly, had exposed a hardcoded API key in their public JavaScript code. This key provided unrestricted access to their ArcGIS mapping system containing sensitive data from 5,000 police departments, 6,000 community deployments, and 1,000 private businesses, including license plate detections, patrol car locations, drone telemetry, body camera positions, 911 call data, and surveillance camera locations. The vulnerability was found across 53 separate instances and has since been remediated following responsible disclosure.