CRPD Addresses Security Concerns of Third-Party Public Safety Cameras

CRPD Addresses Security Concerns of Third-Party Public Safety Cameras

Cedar Rapids, IA - Cedar Rapids Police were made aware of a vendor's configuration error that allowed access to one or more of the City's five downtown point-tilt-zoom cameras via the Internet. The vendor, Flock Safety, communicated this issue on Monday, December 22, 2025 to Cedar Rapids Police. Flock Safety identified the misconfiguration and has already applied proper security measures, assuring that safeguards are in place to prevent further unauthorized access.

__________________________ ___
From Flock Safety:

We want to share an update regarding a limited misconfiguration setting identified on a very small number of Condor devices. Please be assured: no sensitive or confidential information was accessed or accessible.

What happened?

The debug interface of a small number of Condor units was temporarily accessible on the internet without password protection. This debug interface is simply for troubleshooting, it does not allow for any manipulation of the camera or video. Nor does it afford any access to the Flock cloud. These units were part of a testing process used to ensure compatibility and reliability with cellular carriers such as Verizon, AT&T, and T-Mobile. This testing is a standard step for all connected devices.

Importantly, this exposure did not provide access to Flock's cloud infrastructure, customer accounts, or any advanced search or analytics features. The only content visible was live and recorded video comparable to what could be observed from a public roadway. Once identified, the issue was promptly corrected and security updates were deployed across the network. This is not indicative of a broader or ongoing concern.
_________________________________

The City's Public Safety Camera System includes continuously-recording cameras at City parks, facilities, major intersections, and in five downtown locations, as well as stationary and mobile Automated License Plate Readers (ALPR), and the Automated Traffic Enforcement (ATE) system. Together, the system provides real-time information to authorized users in the Cedar Rapids Police Department. The unit(s) affected by the configuration error is part of the downtown system and does not use ALPR technology. It is used primarily in crime prevention and public safety. Video from the downtown cameras capture public spaces and are not considered sensitive.

The City and Cedar Rapids Police Department maintain strong policies regarding access and usage by our employees. That policy, information detailing the location of ALPR cameras, quarterly reports and narratives showing the benefit of these systems are available at CityofCR.com/ALPR.

The error has been addressed by Flock Safety. The overall Public Safety Camera System continues to add value to the City's efforts to ensure public safety.

# # #