Open-Web Cops: Live Drone Spycams Exposed

San Francisco police left live drone feeds exposed online for months, and the leak pulled back the curtain on how fragile modern surveillance security can be.

Quick Take

Live feeds from five San Francisco Police Department drones were reachable on the open web for about six months.
The exposed stream reportedly showed color video, thermal imaging, flight data, and pilot contact details.
Police say they disabled the link after learning of the issue and found no sign that others accessed it.
The case adds to wider concerns about fast-growing drone use, weak oversight, and simple security mistakes.

How the exposure happened

Researchers Sam Curry and Maik Robert found a public web link that let them view live feeds from five San Francisco Police Department drones without logging in. Reports say the link had no password and was set to remain active for a year, even though it was meant for law enforcement use. The researchers reported the issue to Skydio, and the feed was taken offline after the discovery.

What made the exposure serious was the range of data tied to the live view. The public stream reportedly included color video, thermal imaging, GPS data, battery status, and the names and email addresses of drone pilots. That means the problem was not just a picture leak. It also exposed operational details that could help outsiders track police activity in real time or learn how the system was being run.

What the footage showed

The leaked material was not limited to routine flight images. According to reports, the footage included arrests, apartment visits, searches near homeless encampments, and tracking of people and cars across the city. One account said the researchers archived more than three hours of footage covering 44 miles of drone flight before the feed went dark. That kind of record gives a rare look at how often drone surveillance reaches ordinary street life.

The reports also say some of the footage captured people who were not linked to a crime. That detail matters because police drone programs are often sold as narrow tools for urgent calls, not broad neighborhood monitoring. If the footage is accurate, the leak showed how easily a system built for public safety can drift into everyday surveillance with little notice from the people being filmed.

Police and company responses

San Francisco police said the link was intended for law enforcement use only and was not meant for public sharing. The department also said it disabled the link right away, tightened sharing rules, and had no evidence that anyone besides the two researchers accessed the live feeds. Skydio said agencies control the security settings for shared live links, which pushes the key responsibility back onto the police department.

A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance | Andy Greenberg & Dhruv Mehrotra, WIRED

Just after noon on a Saturday last month, a Skydio X10 quadcopter hovered about 200 feet over a San Francisco apartment complex, watching police… pic.twitter.com/KxIZ3yKjmi

— Owen Gregorian (@OwenGregorian) July 14, 2026

That response may calm some fears, but it does not erase the core problem. A public link with no login and a long expiration window is hard to defend as a minor slip. At the same time, the official statement leaves open a narrower question: how many people, if any, saw the streams before the fix. Police say they do not know of other access, but they have not released the logs that would settle it.

Why the story matters beyond San Francisco

The leak lands at a time when drone use in San Francisco has been growing fast, and that growth has already stirred political debate. City voters approved expanded police drone use in 2024, and police have pointed to crime-fighting results to defend the program. Skydio has also promoted San Francisco drone deployments as part of a drop in auto theft. That makes the privacy side of the story harder to sell, even when the security facts look bad.

For readers on both the left and the right, the larger issue is not just one broken link. It is the same old problem of public systems moving faster than public safeguards. A city can support police tools and still expect basic data protection. When live feeds, pilot data, and sensitive street footage can sit on the open web for months, it raises a blunt question: who is watching the watchers, and who is checking their security before the damage is done?