Motorola ReaperHD plate readers found streaming to the open internet

In January 2025, a security researcher bought a Motorola ReaperHD license-plate-reader camera on eBay and found that many identical live cameras were misconfigured to stream colour video, infrared video and vehicle data including plate numbers to the open internet, viewable in real time with no username or password. The researcher used text from a 404 error page to locate exposed devices; more than 150 appeared in a public internet-scanning tool, and roughly 170 unencrypted ALPR streams were reported found. A tool published on GitHub logs plates, make, model and colour from exposed cameras to a CSV with a vehicle image. Motorola confirmed the exposures and said it was working with affected customers to close the open access. The ReaperHD is a legacy device whose sales were discontinued in June 2022. No public remediation cost was reported.