What Is HaveIBeenFlocked?

HaveIBeenFlocked is a web tool created by privacy researcher Will Freeman that lets drivers check whether their license plate has been captured by Flock Safety's automated license plate reader (ALPR) network. The name is a play on the well-known 'HaveIBeenPwned' data breach checker, and the concept is similar: type in an identifier, and see whether you've shown up in a database you never opted into.

Flock Safety operates one of the largest private ALPR networks in the United States, with cameras installed in more than 5,000 communities as of 2026. These solar-powered cameras photograph every passing vehicle, run the plate through optical character recognition, and store the data — typically for 30 days — in a searchable database accessible to police departments, HOAs, and private security firms.

The haveibeenflocked project doesn't give you access to Flock's actual database. Instead, it demonstrates how easily ALPR data can leak by scraping publicly exposed camera feeds and search interfaces that were misconfigured or left open to the internet.

How the Tool Actually Works

When haveibeenflocked launched in 2024, it made headlines because it exposed something Flock had downplayed: that hundreds of law enforcement Flock portals were indexable by search engines, and some allowed searches without meaningful authentication. Freeman's tool aggregated leaked search results to show which plates had been queried and where.

The tool works by:

  • Scraping publicly accessible Flock search logs and dashboards
  • Cross-referencing plate numbers against timestamps and camera locations
  • Displaying whether a plate appears in any of the leaked or indexed data

It's important to understand the limits. A 'no result' on haveibeenflocked does not mean Flock cameras haven't photographed your car — it almost certainly means they have if you drive through any covered area. It only means your plate hasn't appeared in the specific leaked datasets the tool indexes.

Why People Are Searching for This

Public concern about ALPR surveillance has grown sharply. In 2024, the ACLU sued Norfolk, Virginia over its Flock deployment, arguing that mass plate scanning violates the Fourth Amendment. Investigative reports from 404 Media and Wired have documented cases where Flock data was used to track abortion patients across state lines, monitor journalists, and support ICE enforcement actions — uses that go well beyond the 'stolen car recovery' framing Flock markets to communities.

Illinois became the first state to significantly restrict Flock in 2024 under an interpretation of the Illinois Vehicle Code (625 ILCS 5/11-208.9), which limits ALPR use for immigration and abortion-related investigations. California's SB 34, on the books since 2016, requires ALPR operators to publish usage and privacy policies and log every search — but enforcement has been inconsistent.

For everyday drivers, haveibeenflocked is often the first time they realize how routinely their movements are logged. That awareness drives people to look up their own plates and to research what other license plate number search tools can reveal.

What to Do If You've Been Flocked

If you find your plate in the haveibeenflocked results — or you simply want to reduce your exposure — you have a few practical options:

  1. File a public records request. If a specific police department uses Flock, you can request the search logs involving your plate under your state's public records law. In California, that's the California Public Records Act; in Texas, it's the Texas Public Information Act.
  2. Contact Flock directly. Flock has a privacy portal at flocksafety.com/privacy where individuals can request information about their data, though the company generally directs you back to the specific agency that owns the camera.
  3. Petition your local government. Many Flock deployments were approved by city councils or HOA boards with minimal public debate. Attending meetings and requesting deletion policies or shorter retention windows has led to reversals in cities like Sedona, Arizona and Paradise Valley.
  4. Support state legislation. Bills limiting ALPR retention or requiring warrants for searches are active in more than a dozen state legislatures in 2026.

HaveIBeenFlocked vs. Traditional License Plate Lookup

It's worth clarifying what haveibeenflocked is not. It's not a general license plate lookup service — you can't type in someone else's plate and get their name, address, or driving history. That kind of information is protected under the federal Driver's Privacy Protection Act (18 U.S.C. § 2721), which restricts release of DMV records to specific permitted uses like insurance, law enforcement, and litigation.

Traditional license plate lookup services fall into a few categories:

  • Vehicle history reports (Carfax, AutoCheck) — VIN-based, useful when buying a used car
  • Owner contact platforms — services that let you leave a message for a plate owner without exposing their personal information
  • Public records aggregators — limited to information already legally public

For a deeper breakdown of what's actually accessible, see our guide on the Flock license plate database lookup and what remains realistically possible in 2026.

Frequently Asked Questions

Is haveibeenflocked legal to use?

Yes. The tool aggregates data that was publicly exposed or indexed by search engines. Looking up your own plate is legal in every U.S. state.

Can I use haveibeenflocked to check someone else's plate?

Technically the tool doesn't stop you, but using ALPR data to track another person could violate stalking, harassment, or state privacy laws depending on how the information is used.

Does Flock delete data after 30 days?

Flock's default retention is 30 days, but individual agencies can extend it, and data flagged as part of an investigation is retained indefinitely. Retention policies vary by contract.

How is haveibeenflocked different from a VIN check?

A VIN check pulls title, accident, and ownership history from services like the National Motor Vehicle Title Information System (NMVTIS). HaveIBeenFlocked only shows surveillance camera exposure — completely separate data.

Can I opt out of Flock cameras?

Not directly. You can't opt out of being photographed by a camera on public roads. Your only real options are advocating for policy change or driving on routes without cameras — and Flock's coverage maps are not public.

The Bigger Picture and How PlateQuery Fits

Tools like haveibeenflocked matter because they force a conversation about who gets to track your car, for how long, and for what purpose. The answer in 2026 is still mostly 'anyone with a Flock contract, for at least 30 days, for whatever their policy allows.' Public pressure is slowly shifting that, but the default is still surveillance.

PlateQuery approaches license plates from the opposite direction: instead of covert tracking, we enable consensual communication. If someone needs to reach you about a parking issue, a lights-left-on situation, or a fender bender, they can leave a message tied to your plate — and you decide whether to respond. If you'd rather control your own plate's public profile than leave it to third parties, you can claim your plate on PlateQuery and set the terms of how strangers can contact you.

Takeaway: Use haveibeenflocked to understand your surveillance exposure, then take back some control by claiming your own plate profile — so the next time someone looks up your car, the conversation happens on your terms.