Inside Uzbekistan’s nationwide license plate surveillance system

In Uzbekistan, a comprehensive network of high-resolution cameras is continuously monitoring vehicles' license plates and their occupants. This extensive system, comprising approximately a hundred cameras, is designed to identify traffic violations, including instances of running red lights, failure to wear seatbelts, and unlawful nighttime driving. One notable case involved tracking a particular vehicle over six months as it navigated between Chirchiq, Tashkent, and Eshonguzar, frequently making the same trips weekly. This level of surveillance was made possible due to a significant security oversight: the license plate tracking system was discovered to be publicly accessible online without any password protection. Security researcher Anurag Sen uncovered this vulnerability and shared his findings with TechCrunch, highlighting the potential privacy risks associated with such monitoring systems. It remains uncertain how long this surveillance data has been available to the public, but records indicate that the database was established in September 2024, with traffic monitoring commencing in mid-2025. This incident sheds light on the operations of national license plate tracking systems and the extensive data they collect, underscoring the privacy implications for citizens. The incident also coincides with increasing surveillance measures in other countries, such as the United States, where a national array of license plate readers is being developed. Recently, independent media outlet 404 Media reported that cameras from surveillance company Flock were similarly exposed online, allowing real-time tracking of individuals. Sen's findings revealed that the exposed database included detailed information on camera locations and contained millions of photos and video footage of vehicles. The system is operated by the Department of Public Security within Uzbekistan’s Ministry of Internal Affairs, which did not respond to inquiries regarding the security breach. Additionally, the Uzbek government's representatives in Washington D.C. and New York did not provide comments on the matter. The surveillance technology is provided by Maxvision, a company based in Shenzhen, China, which specializes in internet-connected traffic management and surveillance systems. Their marketing materials claim that their cameras can capture illegal activities and provide real-time information on traffic violations. TechCrunch's analysis of the exposed system identified at least a hundred cameras strategically placed throughout major Uzbek cities, busy intersections, and even rural areas near contentious border regions. In Tashkent, the capital, these cameras are positioned at numerous locations, with some even visible on Google Street View. The high-resolution footage, which can reach 4K quality, allows operators to view detailed images and video of traffic violations through a web interface that features a user-friendly dashboard. This dashboard includes zoomed-in images and raw video of infractions, raising significant concerns about privacy and data security. The exposure of Uzbekistan’s license plate tracking system is part of a broader trend of security breaches involving road surveillance cameras. Earlier reports indicated that various license plate readers in the United States were similarly accessible online, revealing a troubling pattern of inadequate security measures in the realm of public surveillance.