Daily Surveillance Briefing: September 2, 2026

A Florida sheriff's deputy honored as 'Deputy of the Year' used Flock Safety's national automatic license-plate-reader network to stalk his ex-girlfriend, according to a 404 Media investigation that also describes an allegation he held a gun in her mouth and performed a Nazi salute. The same week, Krebs on Security reported the FBI is probing a service that advertised more than 153 million US drivers-license records for sale. EFF separately documented a federal court ruling that the Department of Defense unlawfully retaliated against Anthropic over the company's stated limits on military and surveillance uses, and published a separate warning that Meta's $17 billion teen-safety settlement will normalize age-assurance technology. ICE is preparing to spend millions on Boston Dynamics Spot ground robots. CDT polling in the UK found 89 percent of British adults want a court order before any access to encrypted messages.

State of Surveillance

Today in Surveillance:

  • A Florida sheriff's deputy honored as "Deputy of the Year" used Flock Safety's national ALPR network to stalk his ex-girlfriend. 404 Media's investigation, published August 27, draws on an internal affairs review and video evidence and describes an allegation the deputy held a gun in the woman's mouth and performed a Nazi salute. Flock's public statements that audit logs prevent this pattern did not stop it [1][2].
  • The FBI is probing a service that advertised more than 153 million US drivers-license records for sale. Krebs on Security published the report on September 2 [3].
  • A federal judge ruled the Department of Defense unlawfully retaliated against Anthropic. EFF's write-up documents the court's finding that the retaliation followed Anthropic's stated limits on military, surveillance, and autonomous-weapons uses of its models [4].
  • EFF warned that Meta's $17 billion teen-safety settlement will normalize age-assurance technology and expand user monitoring. The group argues the deal constrains teen autonomy rather than protecting it [5].
  • ICE is preparing to spend more than $1 million on Boston Dynamics Spot ground robots. 404 Media reviewed the contracts for the legged surveillance platform [6].
  • 89 percent of British adults want a court order before any access to their encrypted messages. CDT polling, reported by The Register, lands as the UK Online Safety Act and Ofcom guidance continue to push for client-side scanning [7].

Also today: EFF asked California Governor Gavin Newsom to veto AB 1709, the under-16 social-media restriction now sitting on his desk [8]. Artist Simon Weckert's "Digital Camouflage" shirt, an adversarial-pattern garment that confuses AI surveillance cameras, was demonstrated against police cameras in Berlin [9]. 404 Media separately reported that Flock's CEO has been denying the outlet's reporting on an ALPR-search abortion investigation to law-enforcement customers [10].

A "Deputy of the Year" Used Flock's National ALPR Network to Stalk His Ex

404 Media published an investigation on August 27 that should sit at the top of any policy conversation about warrant requirements for license-plate-reader queries. The piece documents a Florida sheriff's deputy honored as "Deputy of the Year" who used Flock Safety's national automatic license-plate-reader network to track his ex-girlfriend's movements. The investigation draws on an internal affairs review, body-camera and surveillance video, and contemporaneous messages. The outlet separately reports an allegation, raised in the internal file, that the deputy held a gun in the woman's mouth and performed a Nazi salute during an encounter unrelated to the ALPR searches [1].

The structural point is the one Flock itself has been pressed on: when an officer runs a query against a national ALPR network, the platform does not require a warrant, a documented investigative reason, or supervisor approval before the search runs. The audit log records the query. The audit log does not prevent it. The 404 Media piece is consistent with the pattern our prior coverage has tracked in the nationwide Flock backlash and in the database Flock has built, which now sits underneath thousands of municipal and private camera contracts [2][1].

The second front opened the same week. 404 Media reported on September 1 that Flock's CEO has been denying the outlet's reporting on an ALPR-search abortion investigation to law-enforcement customers. The press-freedom reading is direct: a vendor is contradicting published reporting to police customers without correcting the record, and the customers are the agencies who decide whether the searches continue [10]. The legislative through-line runs through the warrant-requirement bills tracked in our prior IPVM coverage. The question those bills try to answer is the one this case poses: do you have to articulate a reason before you query, or only explain it after.

The FBI Is Probing a Service That Advertised 153 Million US Drivers-License Records

Krebs on Security reported on September 2 that the FBI is investigating an underground service that advertised more than 153 million US drivers-license records for sale. The pitch, Krebs reports, was a KYC-fraud-as-a-service market aimed at identity thieves who need a working driver's license to clear identity checks at cryptocurrency exchanges, banks, and age-verification vendors. The number is the size of the dataset the service claimed to control; it is the kind of headline figure that gets repeated and then quietly revised downward in the prosecution paperwork [3].

The data-broker angle is the part that matters for a surveillance audience. Drivers-license records are not pulled from a single breach. They are aggregated from state DMV systems, KYC vendors, insurance filings, and commercial data brokers. The service does not need to break into a state network; it needs to assemble what data brokers already sell. The FBI probe is meaningful because it acknowledges that the supply side of identity theft is no longer a single compromised database but an economy built on legally collected personal data. Our recurring breach tracker tracks the demand side; the Krebs piece is the supply side, and it is the larger of the two [3].

A Judge Ruled the DOD Unlawfully Retaliated Against Anthropic

EFF's Deeplinks blog reported this week that a federal judge ruled the Department of Defense unlawfully retaliated against Anthropic. The retaliation followed Anthropic's stated limits on how its models can be used for military, surveillance, and autonomous-weapons purposes. EFF frames the ruling as a constraint on the government's ability to punish a vendor for declining particular uses, and as consequential for the procurement relationship between frontier AI labs and federal agencies [4].

The AI policy question is whether a frontier lab can write limits into its acceptable-use policy and have those limits survive a procurement fight with the Pentagon. The Anthropic-Fable 5 export-control saga our prior coverage has tracked, including the Fable 5 political fallout, is the same fight seen from a different angle: a frontier model that the US government wants to use is one the export-control regime is trying to keep from foreign adversaries, while the procurement regime is trying to keep from a vendor that has drawn a line on use. The EFF ruling is the first judicial word on whether the line holds [4].

EFF: Meta's $17 Billion Teen-Safety Settlement Will Normalize Age Assurance

EFF published a separate warning this week on Meta's $17 billion teen-safety settlement. The group's argument is structural: the settlement normalizes age-assurance technology as the default enforcement mechanism for any platform that minors can reach, expands the monitoring footprint that age checks leave behind, and limits teen autonomy more than it protects it. EFF's read sits inside the same line we have been tracking in the age-verification laws by state and Cory Doctorow's mass-surveillance op-ed [5][4].

The Meta settlement is the producer-side version of the same problem EFF flagged in the Anthropic ruling: once age assurance is built into a platform's compliance posture, the identity layer travels with the user across products, devices, and jurisdictions. The settlement is large enough to set the template. Watch whether other platforms follow the same model, and whether state legislatures begin to codify the same surveillance surface into law [5].

ICE Plans to Spend Millions on Boston Dynamics Spot "Robot Dogs"

404 Media reported this week that US Immigration and Customs Enforcement is preparing to spend more than $1 million on Boston Dynamics Spot, the legged ground robot that the company has marketed for industrial inspection and that police agencies have begun adapting for tactical use. DHS's stated purpose for the robots, per 404 Media, is improving "officer safety." Boston Globe coverage notes the robots can be furnished with a 360-degree live-feed camera, a robotic arm, and other add-ons, and the DHS announcement frames the deployment around "situational awareness" rather than a defined surveillance mission [6].

The surveillance reading is that the boundary between a tactical robot and a roving surveillance camera is one of software. A Spot unit carrying a camera array and tied into an ICE command network is, in operational terms, a mobile CCTV node that can be dispatched to a protest, a workplace raid, or a checkpoint. The cost line in the contract is small relative to ICE's overall budget, which is the point: the deployment model scales by adding units, not by changing the legal framework that governs where the cameras can go and what they record. Our prior coverage of the Thomson Reuters $125 million voter-data contract is the data side of the same expansion; Spot is the hardware side [6][1].

89 Percent of British Adults Want a Court Order Before Encrypted-Message Access

The Register reported polling from the Center for Democracy and Technology showing that 89 percent of British adults want a court order before any access to their encrypted messages. The numbers land in the middle of the UK's Online Safety Act rulemaking and Ofcom's continuing push for client-side scanning capability in messaging platforms. The polling is the cleanest public-mandate counter to the technical-capability-notice regime that has already been used against Apple, which our coverage of the UK encryption backdoor order has tracked through the Investigatory Powers Tribunal [7].

The argument is the same one that ran through the Apple fight: a warrant requirement is the public's stated preference, and the technical capability regime is the government's stated preference, and the two are in direct conflict. A 89 percent polling result is the kind of figure that gets cited in court filings; whether it changes the Ofcom guidance is a separate question [7].

What to Watch

California AB 1709. EFF asked Governor Newsom to veto the under-16 social-media restriction. The bill sits on his desk; the age-verification component is the surveillance piece. Watch for a signature, a veto, or an amended return [8].

The Flock CEO response to 404 Media. 404 Media's reporting on the abortion-case ALPR search has been denied to law-enforcement customers without a published correction. Watch whether Flock issues a public statement, and whether any agency that relied on the denial asks for a record correction [10].

The Anthropic DOD ruling on appeal. EFF reported the trial-court ruling. Watch for the government's response and whether the case settles into procurement policy or becomes the next test of a vendor's acceptable-use limits in court [4].

The drivers-license indictment. Krebs reports the FBI is probing the service. The next signal is whether the probe produces an indictment, a takedown of the marketplace, or both, and whether the supply chain points back to specific KYC vendors or data brokers that fed it [3].

Boston Scientific, Stryker, Medtronic. Our September 1 briefing tracked the Boston Scientific order-processing outage and the medical-device pattern. No restoration date was set at last report. Watch the next 8-K and the earnings call for an operational update [3].

Sources

  1. 404 Media: Florida "Deputy of the Year" used Flock to stalk ex, held gun in her mouth, did a Nazi salute (August 27, 2026; the internal-affairs investigation, video evidence, and Flock's audit-log claims). https://www.404media.co/florida-deputy-of-the-year-used-flock-to-stalk-ex-held-gun-in-her-mouth-did-a-nazi-salute/
  2. State of Surveillance: Flock Cameras Destroyed Nationwide in ICE Backlash, the prior piece on the warrant-requirement debate and Flock's audit-log architecture. /news/flock-cameras-destroyed-nationwide-ice-backlash-2026
  3. Krebs on Security: FBI Probes Service Selling 153M+ Drivers Licenses (September 2, 2026; the FBI probe, the KYC-fraud marketplace, and the data-broker supply chain). https://krebsonsecurity.com/2026/09/fbi-probes-service-selling-153m-drivers-licenses/
  4. Electronic Frontier Foundation, Deeplinks: Judge Rules DOD Unlawfully Retaliated Against Anthropic (September 1, 2026; the federal-court ruling, the procurement context, and Anthropic's stated limits on military, surveillance, and autonomous-weapons uses). https://www.eff.org/deeplinks/2026/09/judge-rules-dod-unlawfully-retaliated-against-anthropic
  5. Electronic Frontier Foundation, Deeplinks: Meta's $17 Billion Settlement Is a Bad Deal for Teens (and Everyone Else) (September 2026; the age-assurance normalization, expanded user monitoring, and teen-autonomy critique). https://www.eff.org/deeplinks/2026/09/metas-17-billion-settlement-bad-deal-teens-and-all-social-media-users
  6. 404 Media: ICE Plans to Spend Millions on Boston Dynamics "Robot Dogs" (September 2026; the >$1M Spot contracts, the surveillance-platform description, and the onboard-camera capability). https://www.404media.co/ice-plans-to-spends-millions-on-boston-dynamics-dog-robots/
  7. The Register: 89% of British adults want a court order before access to encrypted messages (August 30, 2026; the CDT polling, the UK Online Safety Act context, and the Ofcom client-side-scanning guidance). https://www.theregister.com/security/2026/08/30/turns-out-brits-would-quite-like-their-private-messages-to-stay-private/5292994
  8. Electronic Frontier Foundation, Deeplinks: EFF to Gov. Newsom: Veto California's AB 1709 (August 2026; the under-16 social-media restriction, the age-verification component, and the surveillance concern). https://www.eff.org/deeplinks/2026/08/eff-gov-newsom-veto-californias-ab-1709
  9. 404 Media: This "Digital Camouflage" Shirt Confuses AI-Powered Surveillance Cameras (2026; the Simon Weckert adversarial-pattern garment and the Berlin police-camera demonstration). https://www.404media.co/this-digital-camouflage-shirt-confuses-ai-powered-surveillance-cameras/
  10. 404 Media: Flock's CEO Is Lying to Cops About 404 Media's Reporting on Abortion Case (September 1, 2026; the CEO's denials to law-enforcement customers and the absence of a public correction). https://www.404media.co/flocks-ceo-is-lying-to-cops-about-404-medias-reporting-on-abortion-case/