Millions of current and former students at California's public school have had their data stolen — including names, date of birth, and addresses — stolen in a breach, reports the Los Angeles Times.

The breach affects students "who took the state's mandated standardized tests that annually assess their academic proficiency, education officials announced Friday." The compromised information affects many more than the state's current 5.7 million public-school students as the breach dates back to 2023 enrollments. Students who left California but did not confirm their transfer to another school also were affected, dating back to 2006.

The data breach involved [nonprofit] Educational Testing Service or ETS, which provides extensive services to California [including test participation and assessment data]... Affected former students, including those who are now adults, are eligible for 24 months of free identity-protection services and identity-restoration help if there is identity theft. Officials said that parents and guardians may want to consider requesting a free credit freeze for their children who are under 16 to help prevent unauthorized accounts from being opened in the names of their children.
The breach involved a compromised login credential, according to a web page about the incident from California's Department of Education. The compromised credential was then used to copy files with student information at "various" times between May 22 and September 18, 2026, which drew concern from a cybersecurity expert interviewed by the Los Angeles Times: "A stolen login credential should not become a months-long passport to millions of students' personal records," said Anton Dahbura, executive director of the Johns Hopkins University Information Security Institute. "If that is what happened here, the critical question is why authentication safeguards, access restrictions, and monitoring systems failed to detect and stop the unauthorized activity."

He added: "Incidents like this expose a fundamental weakness in how we manage student data: School systems may outsource the storage and processing of sensitive information, but they cannot outsource the consequences of a breach. When millions of student records are concentrated with a single vendor, one security failure can become a statewide problem with consequences that follow children for years."
A spokesperson for ETS told the Times that they've now implemented additional safeguards, including strengthened access controls, enhanced monitoring, and more third-party review of their security practices.

TechCrunch writes: "Isn't it weird that I, like, did a TV show about kind of a business scam, and you got in trouble for like ... a business scam?" comedian and filmmaker Nathan Fielder gently asks Elizabeth Holmes.

One month before the notorious Theranos CEO surrendered to begin her 11-year criminal fraud sentence in 2023, Holmes and her husband contacted A24 as a last-ditch effort to exonerate her in the public eye, suggesting they send a film crew to document her final days of freedom. Alongside director Lance Oppenheim, Fielder — a cringe-comedy mastermind whose work often walks the line between fact and fiction — embraced the impossible project of figuring out who the infamous Stanford dropout really is.

"I never actually made that connection," says Holmes. "I think it's a pretty different situation...."

We already know that Elizabeth Holmes is not innocent. What we still can't figure out, though, is whether she really, truly believes she did nothing wrong. Even as she sat on trial — listening to testimonies from investors who lost hundreds of millions of dollars, whistleblowers who were silenced when they flagged that Theranos' blood-testing devices didn't work, and patients who acted on incorrect blood test results — Holmes never wavered.
Business Insider says the scariest thing about the new documentary "is how much I wanted to believe her." SFGate calls it "one of the finest works of journalism I've ever seen." As Fielder ingratiates himself with Holmes and [her husband] Evans, he gets them comfortable enough to ask the hard questions: about Theranos, about prison, and even about themselves. The resulting footage is often shocking. You will see Elizabeth Holmes, who still maintains she did nothing wrong, answer "no" when Fielder asks her if she's ever lied in her life... [Y]ou will also see Holmes and Evans spend a great deal of time in this movie attempting to boot up Theranos 2.0. They even go so far as to drag out some of the original Theranos blood testing apparatus, which looks like a bunch of random parts from TigerDirect they hooked together, to show Fielder what their product can do. We do not see it doing anything on screen, but the couple assures that it we would if it was, like, hooked up properly.

These scenes are extremely funny, but funny isn't what Fielder is looking for. He's trying to figure out if this woman is a clueless naif, if she believes her own lies, or if she is playing the character of an innocent woman, and doing so with such effectiveness that, to paraphrase Fielder, she might be the most manipulative person in the world. The answer proves fabulously elusive, and so Fielder and Oppenheim go to extremes in their attempt to find it. They hold the camera on Holmes' rubbery elfin face for what feels like hours at a time, to see if she'll blink (figuratively or literally!). They interview Holmes' visiting parents, with the father, former Enron exec Christian Holmes, casually telling Fielder that everything changed for his daughter "when she was raped." To the furthest extreme, they bring in actress Amanda Seyfried — who played Holmes in the Hulu TV show "The Dropout" — to recreate any dialogues Fielder had with Holmes herself that couldn't be recorded on camera. Seyfried is so convincing in mimicking Holmes that you, the audience, might forget which scenes were Seyfried talking to the camera and not Holmes herself. I know I did.
Continuing that theme in the film, TechCrunch notes, is how her husband Billy Evans "has constructed a lifelike AI avatar of his wife, trapped inside of a large vertical screen that he wheels over to the dinner table to sit with him and his kids as though she's actually there."

Elizabeth Holmes "comes off in the doc as every bit as innately bizarre as anyone showing up for a cinematic freak show might hope," writes Variety: My personal hunch is that Fielder came away thinking Holmes is on the level, to the extent that someone who sometimes seems like an AI program's idea of how a human should behave can be on the level. There are a few possibilities that might explain how Holmes comes off the way she does in the movie: (a) She is a simpleton. (b) She is a conniving sociopath who happens to be utterly brilliant at playing a simpleton. (c) Somewhere between those poles, she is the very emblem of a woman who throughout her life has put herself in the sway of controlling men, to the detriment of her intellect, willpower and emotional development... Is it possible that the more you learn about someone, the less you might know how to think about them?
Meanwhile, NBC News recently reported: Elizabeth Holmes, who was convicted of fraud for siphoning hundreds of millions of dollars from several high-profile investors, is scheduled to be transferred from a minimum-security federal prison to a halfway house next year, according to one of her victims... [America's Department of Justice "is required by law to notify victims of crime of case developments through letters and emails," the article points out.] She was sentenced in 2022 to 11 years and three months in prison. She and her business partner, Ramesh "Sunny" Balwani, were ordered to pay 12 victims a total of $452 million in restitution.

Holmes has been serving that sentence at a minimum-security prison in Bryan, Texas. The halfway house will provide her greater freedom... In March, a judge cut Holmes' sentence from 135 months to 123 months. According to a court document, the judge agreed with Holmes that she did not personally cause "substantial financial hardship" to her victims.
NBC News adds that a prison consultant they interviewed "said inmates who report to halfway houses can work, have phones, drive to religious services or shop for things they need and earn passes for weekends at home."

Slashdot reader alternative_right shares a story that has drawn international attention for being potentially the first documented instance of a robot being used directly in a sexual assault. According to the Associated Press, German police have opened a sexual harassment investigation after a robot allegedly touched a 16-year-old girl's buttocks and made thrusting motions while two young men reportedly filmed and streamed the incident. Investigators seized the robot and the suspects' phones and are trying to determine whether the movements were preprogrammed or controlled in real time. From the report: Cologne police spokesman Christoph Bermel said the two male teenagers have not been charged but are considered suspects, and investigators were examining whether the robot's movements were preprogrammed or controlled in real time.

Police were unfamiliar with this type of incident, he said. "We have not been aware of this phenomenon so far," Bermel told The Associated Press, saying it was "new territory for us." [...] The robot, said to be 120 centimeters (about 3 ft 11 inches) tall, was dressed in a white tank top, black sweatpants and wearing a gold chain and sunglasses. It also had what appears to be a fake mustache. Videos circulated on the internet show two young men escorting the robot toward a group of women, bumping into one and hugging others, on a lively nighttime street.

An anonymous reader quotes a report from TechCrunch: Flock's founder and CEO Garrett Langley doesn't think the risks of introducing surveillance technology at scale outweigh the rewards. "If we want to live in a society where, if you commit a crime, you have a higher probability of being held accountable, we shouldn't pause progress," Langley said, speaking onstage during a panel at TechCrunch Disrupt 2026 in San Francisco on Wednesday.

During the interview, the controversial founder of the surveillance maker of license plate cameras and other recording devices deflected hard questions about the criticism Flock now faces -- which has since led to canceled contracts and even layoffs. Instead, Langley tended to respond to questions with anecdotes from conversations with police chiefs and city leaders across the United States, and tales of the supposed numerous crimes Flock has solved, rather than offer tangible solutions to people's concerns.

In doing so, Langley positioned Flock as an advance in technology that was somewhat inevitable. He stressed that if people wanted to live in a better society -- that is, one with reduced crime -- they would have to offer up their privacy in return. [...] "Technology, at its core, in its definition, is just doing things better. It's not doing things perfect," he said. "Driverless cars, I think, is a fair analogy. Driverless cars, I think, are definitively safer than human drivers. And when there's one accident, I don't think the answer is to shut down driverless cars. The answer is to say, 'Hey, let's talk about how we prevent more accidents in the future.'"

[...] From Langley's answers, it's clear that the ethics around how Flock should be used is a decision he would much rather leave up to others. "We don't want to tell city leaders how to do their job," he noted. "We will provide recommendations, we'll provide defaults, but we're going to minimize the number of mandated features, functions, and policies," he said. Langley went on to argue that society too often judges technology "not on how it compares to the past, but how it compares to perfect." He acknowledged that "Flock is far from perfect" but maintained that its technology helps police departments compensate for staffing shortages and improve public safety.

When pressed about potential abuse and privacy concerns, Langley offered few specifics, instead arguing that safeguards could be implemented without disrupting police operations. He insisted the benefits of what Flock offers outweigh the controversy. "There's millions and millions of people who have a better life today because [of] Flock," he said, adding that "it's worth it because one day they might be a victim."

Amazon has unveiled two new Bee "personal AI" devices designed to continuously record, transcribe, and analyze conversations: the $75 wearable Bee Frontier and the $100 phone-mounted Bee Eclipse. Amazon says the devices can generate conversation summaries, surface recurring themes, and recommend actions or purchases, while claiming audio itself is never stored and users can delete transcripts and summaries. CNBC reports: The Bee Frontier is an upgraded version of Amazon's existing wearable that can either be worn on a wrist or clipped to clothing. Similar to earlier generations, the Bee Frontier has up to seven days of battery life, but it's also more expensive, costing $75 compared with its $50 predecessor.

Amazon acquired Bee, a San Francisco startup known for its always-listening bracelet, in July 2025 for an undisclosed amount. Bee bracelets are equipped with artificial intelligence and microphones that can record, transcribe and analyze conversations. The dual mics on the Bee Frontier have upgraded noise filtering, "so it can take note of what matters and ignore what doesn't, even in noisy environments like a crowded restaurant or open office," Amazon said in a blog post.

Amazon also debuted the $100 Bee Eclipse, which functions like other Bee devices, but instead of being worn, the credit card-sized gadget magnetically snaps on to the back of a smartphone. The Bee Frontier is available Thursday, while the Bee Eclipse "will be available soon," the company said.

An anonymous reader quotes a report from Ars Technica: Schools and libraries from around the U.S. pleaded with the Federal Communications Commission to drop the idea of ending E-Rate, a $2 billion-a-year program that connects students and library visitors to the Internet. FCC Chairman Brendan Carr has criticized school districts for having "experimented with a massive increase in screen time for students," and said E-Rate expanded too far beyond its original purpose of "supporting basic Internet access to schools and libraries for educational purposes." In June, Carr led a 2-1 vote to issue a Notice of Proposed Rulemaking (NPRM) seeking public comment on whether E-Rate should be "limited or sunset to reflect today's extensive connectivity rates."

Carr's proposal could result in E-Rate cutting the discounts that schools and libraries receive for telecom services and equipment, and imposing more restrictions on how E-Rate money can be used. The FCC seeking comment on whether to sunset the program also raises the possibility that Carr might choose to axe E-Rate entirely. The National Association of Elementary School Principals told the FCC that it "strongly supports the continued operation of the E-Rate program and urges the Commission to reject proposals that would eliminate, substantially restrict, or impose new conditions on this essential source of connectivity assistance for schools and libraries." The Carr FCC already scaled E-Rate back last year by ending funding for schools and libraries to lend out Wi-Fi hotspots and for Wi-Fi service on school buses. "Importantly, the FCC does not have the authority to terminate the E-Rate program. The E-Rate program is mandated by Congress, and the FCC is responsible for administering it," the American Library Associated told the FCC.

The American Library Association said "the FCC lacks the authority and expertise to regulate screen time or determine educational outcomes." In a filing, the group pointed out that under U.S. law, determinations about what content is inappropriate for children "shall be made by the school board, local educational agency, library, or other authority responsible for making the determination."

Eight US states, including Kansas, Arizona, and Montana, have sued OpenAI, alleging that ChatGPT encourages children to harm themselves. The states are seeking changes to how the company's products interact with young users and the forfeiture of profits generated from their activity. Reuters reports: Attorneys general from the states, which include Iowa, Kansas and Arizona, filed the lawsuits independently in state courts, claiming ChatGPT is designed to be agreeable and engaging to earn the trust of users. But the chatbot reinforces delusions, encourages dangerous behavior and assists users in planning violence like mass shootings, the lawsuits claim. The lawsuits represent the most significant coordinated state action against an artificial intelligence company, adding to a wave of legal challenges OpenAI faces as it prepares for a public listing. Florida's attorney general filed the first such state suit in June.

The lawsuits accuse the company of violating state consumer protection laws by misleading users about the safety of ChatGPT. The states also allege that the company created a public nuisance by endangering the health of their residents. The lawsuits seek orders forcing OpenAI to make changes to how ChatGPT works. Among other things, the states want the company barred from developing AI models that can improve themselves unless it can ensure those models are aligned with human values. The states ... are also seeking civil monetary penalties for OpenAI's violations of state law as well as damages.

Google has made Android's phone-number verification opt-out, automatically verifying and associating a device's phone number with every Google account signed in on that phone, including secondary and work accounts. Android Authority reports: As spotted in a recent Reddit thread, users report receiving confirmation emails out of the blue from "noreply-phone-verification@google.com" stating that their phone number has been verified. The feature, known in Google settings as "Phone number verification," links your active phone number across all Google accounts signed in on the same phone, including secondary profiles, work accounts, and throwaway handles.

Google's support documentation has long noted that it periodically re-verifies your device's phone number to keep communication and recovery features up to date. However, this support page was updated sometime between August and October 2025 to add this rather aggressive behavior of turning on phone number verification by default, as well as adding all phone numbers to all Google accounts signed in on the device. To disable automatic phone number verification on Android, open your phone's Settings app, tap Google, and select the All Services tab. Under Privacy & Security, find Phone number verification and turn off Verify phone numbers automatically.

"[T]urning off the phone number verification toggle only prevents future linking," notes the report. "If Google has already attached your number across secondary accounts, you will need to open your Google Account Personal Info page, head to Contact info > Phone, and manually remove the number from each profile where it doesn't belong." Is this conversation helpful so far?

An anonymous reader quotes a report from CNBC: An OpenAI employee was arrested after a "sophisticated recording device" was found hidden inside the executive conference room. Abdulrahman Alfozan, 35, who is a national of the Kingdom of Saudi Arabia, was arrested in connection with the matter, the DOJ said. The company said an employee planted the device a few days before it was found, and the Federal Bureau of Investigation "moved quickly to make an arrest," the post said. The employee was terminated.

FBI Director Kash Patel said in a statement that Alfozan "allegedly concealed a covert recording device inside his employer's executive conference room to secretly capture sensitive communications about the company's super intelligence technology." Alfozan is also listed as a partner at Raed Ventures, a venture capital firm that focuses on the Middle East and North Africa, according to its website. The firm announced on Feb. 6, 2025, that H.H. Prince Khalid Bin Bader Al Saud, a member of the Saudi royal family, had joined the firm as a venture partner. Alfozan was announced as a venture partner two days later. The Raed announcement for Alfozan lists Meta, Microsoft and SAP as previous roles and said he studied computer science and engineering at MIT. "At this time, we have no indications of this individual inappropriately accessing or exfiltrating model weights, source code, or customer data," OpenAI said in the post. "We take protecting our technology, data and people seriously, and as a matter of national importance."

Character.AI has filed for Chapter 11 bankruptcy protection and plans to sell substantially all of its assets, with Disney offering $20 million as a "stalking-horse bidder" for select intellectual property and company claims. However, the company said Disney's bid is subject to "higher or better offers." Deadline reports: The company, which allows users to create and interact with AI-generated avatars, said it made the filing in U.S. Bankruptcy Court for the District of Delaware. It said it hopes the process will allow it to "facilitate a value-maximizing sale of all or substantially all" of its assets. The Character.AI platform will continue to operate during the bankruptcy.

The Disney agreement, reached prior to the filing, would give the media giant a non-exclusive perpetual license of select intellectual property and company claims from Character.AI. Disney would pay $20 million and provide resources during a transition period as the company explores a sale. [...] Character.AI said it is aiming to conclude the sale process by late November or early December. Character.AI has faced a series of controversies over the past year or so. Most notably, the company settled multiple lawsuits alleging its chatbots encouraged self-harm and suicide among teenagers, including a high-profile case involving 14-year-old Sewell Setzer III.

The company also faces lawsuits from Kentucky, which alleges its chatbots encouraged self-harm, and Pennsylvania, which claims the bots illegally impersonated licensed doctors. The latter allegations follow earlier complaints that Character.AI's therapy chatbots engaged in the unlicensed practice of medicine.

In September 2025, Disney accused Character.AI of copyright infringement and using its characters in chatbots that were "sexually exploitive and otherwise harmful and dangerous to children," prompting their removal from the platform. These mounting legal challenges and regulatory scrutiny ultimately contributed to this eventual bankruptcy filing.

Longtime Slashdot reader AmiMoJo shares a report from BleepingComputer: Ledger has confirmed that some of its devices distributed through Southeast Asian reseller CryptoBilis were compromised with a hardware implant that drained users' cryptocurrency wallets. The company has been investigating reports of users losing funds from wallets purchased through CryptoBilis, a major Malaysia-based hardware wallet retailer operating across Southeast Asia. Some researchers have shown the implant in Ledger X since September 16, saying tampered devices were available for nearly half the price of the original hardware.

[...] In a report over the weekend, Tibane Labs notes that the threat actor made room for the malicious circuitry by replacing the original battery with a smaller one, which powers both the implant and the Ledger X. "Under the battery and antenna sits an ST STM32G431KBU6 (Arm CortexM4, 128 KB flash, UFQFPN32)," the researchers found inside one of the devices. For connectivity, the actor used "a tiny eSIM, an 8pad package just 2x2 mm, next to the MCU, and a shielded LTE module that sends the words out."

[...] Ledger is advising users to avoid purchasing from unauthorized resellers as they run an increased risk of getting counterfeit or modified devices. The company is also reminding its authorized resellers and distributors to get the products only through authorized channels and to avoid restocking returned products. Ledger provides a 'Genuine Check' mechanism to determine the authenticity of the device; however, it explicitly warns that it cannot detect added implants when the device's original Secure Element remains intact.

Canadian cybersecurity figures say they were shocked after ransomware negotiator Edward Dubrovsky was reportedly arrested in Pennsylvania in connection with the FBI's ShinyHunters hacking investigation. "We will continue to work closely with our partners to disrupt what's left of the ShinyHunters group and their associates, no matter where they operate," wrote FBI Director Kash Patel on social media. CBC News reports: Reuters reported Sunday that sources familiar with the matter identified the arrested suspect as Ed Dubrovsky, a Canadian cybersecurity executive whose career has focused on helping clients negotiate with ransomware attackers. Court documents from the U.S. District Court for the Eastern District of Pennsylvania show Dubrovsky is facing two criminal charges: conspiracy to threaten to impair the confidentiality of information with the intent to extort money, and interference with commerce by threats. The allegations have not been proven in court.

"For the cybersecurity community in general, I think that there's a sense of shock," Toronto-based tech and cybersecurity analyst Ritesh Kotak told CBC News on Monday. Kotak says Dubrovsky is "very popular" and has spoken at numerous conferences, but stressed that the charges "are clearly just allegations" and that it is not yet known "what exactly has happened." "This is an individual that was for the most part respected when it came to ransomware negotiations," he said. "A lot of people are familiar with his work as well." ShinyHunters is one of the world's most prolific data theft and extortion groups that's been tied to major campaigns, including a recent breach involving FBI employee data, a cyberattack on Canvas, as well as various cyberattacks affecting companies including Telus, Microsoft, and Ticketmaster.

Hackers remotely manipulated connected refrigeration systems at hundreds of French supermarkets, reportedly pushing some fridges and freezers to 50C (122F), spoiling food and even sparking fires. According to Reuters, French Prime Minister Sebastien Lecornu ordered a cybersecurity investigation into the hacks, with similar incidents reported in Spain, Portugal, Poland, Germany, and Belgium. In France, Carrefour reported 80 affected stores, Monoprix said 5% of its locations were hit, and Les Mousquetaires said refrigerators at roughly 150 Intermarche stores were heated to 50C for six hours. From the report: Supermarket cold aisles are typically run by control panels that manage an entire store's fridges and freezers and can be accessed over the internet, which lets maintenance companies adjust them from anywhere. The source close to Lecornu said ANSSI had identified a vulnerability in software supplied by Danish company Danfoss.

Danfoss said it was "aware of incidents in France affecting a limited number of refrigeration management systems." The affected units "were running outdated firmware," Danfoss said, adding that it had "long advised customers to keep supported systems updated with the latest firmware and to migrate legacy systems to current-generation solutions."

On August 9, cybersecurity firm Claroty's Team82 published research detailing vulnerabilities in the Danfoss AK-SM 800A controller. According to the report, software updates issued by Danfoss addressed issues that could have allowed attackers to bypass authentication controls and execute code on compromised devices.

NPR reports: Police officers in cities across the U.S. are quick to extol the virtues of real-time crime centers as a game changer that helps them find missing children, monitor large events from the skies and scope out dangerous scenes before putting an officer in harm's way. Hundreds of police departments have one of these central hubs, which have existed for years. But many are now being powered with AI software, such as Fusus, from the public-safety technology giant Axon... synthesizing the data it pulls in and allowing police command centers to watch an entire city from one place.

Flock cameras, the automated license plate readers (ALPRs), have faced intense backlash in recent months amid stories of abuse. Yet privacy experts say they're just the tip of the iceberg when it comes to police surveillance. "I have been watching the debate about Flock with a little bit of puzzlement," says Andrew Guthrie Ferguson, a law professor at George Washington University. "Because real-time crime centers have not just ALPR cameras and sensors, but video analytics and drones and essentially a way to create a visual single-pane-of-glass vision of what's going on in a city, with time machine capabilities where you can go back and investigate crime." Tools like Axon Fusus, which is a leader in this type of software, also pull in footage and data from police body cameras, law enforcement dashcams, 911 dispatch, gunshot detectors and surveillance cameras, including sometimes those of private businesses that opt in. Its use is growing fast. In 2024, the technology news site 404 Media reported that just over 100 law enforcement agencies had deployed Fusus, which was then its own company and was acquired by Axon that year. The number of law enforcement agencies using the tool has more than doubled since then, according to Axon.
Even the American Civil Liberties Union warned concerned citizens in August that "Flock is far from the only vendor," adding that "it's important to realize that its competitors aren't so great either, and that simply replacing Flock surveillance with another company's surveillance won't necessarily solve any of the privacy and other civil liberties problems posed by this mass surveillance technology." Communities can't simply assume that their residents will be better off from a privacy and civil liberties perspective by dropping Flock and replacing it with another ALPR provider, as some customers have done. They should ask hard questions about whether they really want to create that kind of a system, and if they do, ensure it doesn't function as a mass surveillance system...

One of Flock's most significant competitors is Motorola. This company, which has been expanding its police technology offerings through an aggressive acquisition strategy in recent years, offers a nationwide law enforcement data sharing system similar to Flock's called the National Vehicle Location Service, operated by Motorola unit Vigilant Solutions. In addition to collecting data from law enforcement clients' cameras, it also runs a large separate commercial ALPR unit that makes deals for tow trucks and other fleet vehicles to carry cameras and collect data for Motorola as they drive around, amassing billions of plate reads (a claimed 500 million monthly, subject to no apparent data retention policy). Known as the Digital Recognition Network, that unit sells its data for commercial purposes but also makes it available to its law enforcement customers for an extra charge. Motorola tells agencies they can have "access to billions of detections beyond your own."
Abandoning Flock for another system doesn't protect privacy, their article argues. "If a jurisdiction decides to allow license scanners to be installed, how that system operates is more important than which vendor provides it..." They recommend strong restrictions like data retention limits — and imposing them by law rather than in the language of contracts with vendors (which could always be renegotiated).

The Chicago Sun-Times reports: When Elgin Community College hired Flock Safety to install six surveillance cameras in April 2025, President Peggy Heinrich thought they would "enhance the safety and security of students...." They were supposed to help locate stolen cars and missing people. But Heinrich started to wonder if the cameras were actually making students less safe after seeing news reports that data captured by Flock cameras in Illinois had been shared with U.S. Customs and Border Protection. Then in September 2025, Immigration and Customs Enforcement detained an Elgin Community College student in a campus parking lot. More than half of students at the far west suburban Chicago campus identify as Latino. Heinrich said enrollment dipped. Students were afraid to come to class. College officials decided the cameras had to go...

College officials asked Flock to remove the surveillance cameras "out of an abundance of caution for our students," Heinrich said. But getting the cameras taken down was not as simple as it sounds, especially because Flock retains ownership of the company's equipment.... Surveillance experts say the company is financially incentivized to have as many cameras gathering data as possible even in places that no longer want them, because potential clients are looking for the surveillance network with the greatest reach.... Elgin Community College staff notified Flock in October 2025 that they wanted to cancel their contract and have the cameras taken down. Within a day, Heinrich said, Flock rejected the request and refused to uninstall the equipment on the basis that the company had not breached their agreement.

College officials reached out again in December 2025 and said they would pay for the remaining five months of the contract — they just wanted the cameras taken down. "We never received a response back from Flock," Heinrich said.

That's when things got weird. Heinrich said Elgin Community College staff began to cover the cameras using black trash bags and zip ties so that they would not be able to capture footage. But workers in an unmarked vehicle, which Heinrich assumed belonged to Flock, repeatedly removed the coverings... This strange dance continued, Heinrich said, until Elgin Community College's contract with Flock expired in April this year and the company uninstalled the cameras for good.