DeFlock’s National Week of Action Against Automated License Plate Readers begins August 16. Its public site lists 420 participating cities and groups, with meetings, teach-ins, marches, contract campaigns, and other ordinary political work. Inside the United States’ fusion-center network, the same calendar has become threat material.
Six law-enforcement bulletins obtained through public-records requests describe social posts, protest plans, camera locations, suspected vandalism, and local groups under the shared label of the “DeFlock movement.” 404 Media published the documents and reported that warnings moved among centers in Colorado, Florida, Wisconsin, New Jersey, and New Mexico, through a nationwide ALPR working group, state fusion centers, and an FBI headquarters listserv.
The documents contain legitimate reports of damaged cameras and public posts encouraging sabotage. They also name cities registered for a lawful week of action, quote political organizers, flag an open-source camera map, and tell officers to increase patrols around license-plate readers. One intelligence packet now carries two different things: evidence of property damage and evidence of opposition to the surveillance system.
A public campaign became an intelligence feed
DeFlock is an open-source map of automatic license-plate readers. Its homepage currently reports 19,571 mapped cameras in the United States and presents the project as a way to make otherwise quiet surveillance infrastructure visible. The map supports a political argument through inventory: people can see the cameras, identify the vendor, examine local deployment, and pressure a city to cancel a contract.
The National Week of Action site converts that inventory into a public schedule. It names groups and cities because coordination requires discoverability. That openness also removes most of the acquisition cost for an intelligence analyst. The participant list, social accounts, event pages, campaign language, and map already exist in structured public form.
A July 28 North Florida Fusion eXchange bulletin counted Florida cities registered for the campaign and warned about online calls to damage ALPR equipment. A Colorado Information Analysis Center bulletin highlighted a specific Instagram account posting camera-removal videos, mentioned a neo-Nazi group that briefly discussed sabotage, and placed those references beside DeFlock’s coming week of action. Another digest described “extensive and ongoing chatter” across Facebook and TikTok and linked a person stopped by police to software that could locate internet-connected devices.
Those facts carry different evidentiary weight. A scheduled town hall is an announced civic event. A video claiming to show vandalism is potential evidence of an offense. A social-media comment is speech with uncertain authorship and intent. A loose ideological group discussing sabotage is neither proof that an organizer endorsed it nor proof that an act occurred. The bulletins preserve some caveats, then package the material for broad operational circulation.
The category does the policing
Intelligence systems rarely need to declare every participant dangerous. They create a common folder, a shared keyword, and a distribution route. The downstream officer receives context before encountering a person near a camera, a meeting, or a protest.
The phrase “DeFlock movement” does heavy work across the documents. DeFlock founder Will Freeman told 404 Media that his project has never called for disabling cameras or covering plates, and that unauthorized accounts use the name. His campaign’s public materials focus on mapping, education, contacting representatives, and ending municipal contracts. The bulletins also document independent actors who damage equipment and accounts that publish instructions. A movement label binds those populations without proving an organizational relationship.
That flattening changes the operational baseline. A patrol car sent to “remain vigilant” around ALPR sites during a named campaign does not arrive empty of assumptions. An analyst searching later records can find the campaign beside vandalism warnings. A local police department can treat a public meeting as an indicator attached to a broader threat packet. None of this requires an arrest or a formal watchlist. The intelligence product has already altered attention.
The federal structure magnifies that effect. The Department of Homeland Security describes fusion centers as state- and locally owned entities supported by a national network, federal resources, personnel, and connectivity. A bulletin produced in one jurisdiction can acquire national reach without becoming a federal rule. Distributed ownership gives the system coverage while making responsibility harder to locate.
Surveillance defended itself through surveillance
Automatic license-plate readers make ordinary travel queryable. They record a plate, time, place, vehicle characteristics, and often imagery that can expose bumper stickers, damage, cargo, or other identifying features. DeFlock’s map reverses a small part of that asymmetry by recording the recorders.
The fusion-center response extends the symmetry one step further. Analysts monitor the people mapping the cameras, collect posts about resistance, identify campaign locations, and circulate warnings to agencies operating the devices. The surveillance network gained a political feedback loop: deployment produces opposition; opposition becomes intelligence; intelligence protects deployment.
That loop can consume its own justification. Actual vandalism gives analysts a defensible reason to examine evidence and warn relevant agencies. Broad movement language then pulls lawful organizers into the same frame. Patrols around cameras generate more observations of campaign participants. Those observations can become future intelligence, making the initial category appear increasingly substantial because the system keeps feeding it.
Flock Safety told 404 Media that it had seen few reports of vandalism and works with law enforcement when equipment is damaged or stolen. The company’s statement draws a clean line around criminal acts. The public bulletins do not maintain that line consistently. They use protest schedules and political identities to contextualize property damage, while the contextual material can outlive the incidents that brought it into the file.
Public sources still need minimization
Public availability does not settle legitimate use. A city publishes council agendas. Activists advertise meetings. People post political speech under stable handles. Open-source intelligence can collect all of it cheaply. The governance question concerns selection, retention, linkage, dissemination, and consequence.
A defensible bulletin would identify specific alleged acts, establish dates and locations, separate verified conduct from rhetoric, state confidence, and sharply limit organizational attribution. It would avoid treating event participation as evidence of affinity with vandals. It would define when social handles and protest groups should be removed from later products. Recipients would see the distinction between public-safety awareness and political monitoring inside the artifact, where operational interpretation happens.
The documents published by 404 Media show why that specification matters. The North Florida bulletin says officers should remain vigilant near ALPR sites. The Colorado bulletin discusses organizers, social accounts, vandalism, and extremists. Other digests describe online chatter and technical devices. The network can circulate these products far beyond the center that selected the source material, while affected organizers have no obvious notice, correction path, retention limit, or appeal.
Tomorrow, hundreds of groups will begin a public campaign against mass license-plate surveillance. Police agencies already possess an intelligence frame for watching it. The machinery did not wait for the protest to produce evidence. It converted the protest’s own coordination layer into advance operational context.