Cyber Incident Victim: Verkada
Date:
Mar 2021
Location:
United States of America
Summary
Hackers compromised a security-camera startup, accessing live feeds and complete archives from approximately 150,000 surveillance devices deployed across client organizations. The breach exposed footage from sensitive environments including Tesla facilities, Cloudflare offices, psychiatric hospitals, women's health clinics, prisons, and schools, alongside the company's own internal cameras. Attackers obtained capabilities to utilize facial-recognition features within certain healthcare and corporate installations, enabling identification and categorization of individuals captured on video. The intrusion provided unrestricted visibility into real-time monitoring systems and historical video data belonging to all affected customers.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
On or around March 9, 2021, hackers breached security-camera data managed by Verkada Inc., a Silicon Valley-based surveillance technology company. The attackers claimed unauthorized access to live video feeds from approximately 150,000 cameras deployed across various high-security environments globally. Compromised systems included surveillance devices inside corporate facilities, healthcare institutions, correctional facilities, educational institutions, and law enforcement agencies. The intrusion extended to Verkada's internal camera network, exposing footage from the company’s own offices. Hackers obtained the capability to view real-time camera feeds and download complete historical video archives from all affected Verkada customers. Specific compromised locations utilized facial-recognition technology to automatically identify and classify individuals recorded by the cameras, though the extent of biometric data exposure remained unclear.
The breach impacted multiple prominent organizations, including automobile manufacturer Tesla Inc. and internet infrastructure firm Cloudflare Inc. Sensitive environments exposed included psychiatric hospitals, women’s health clinics, and prison facilities, raising concerns about the privacy of vulnerable populations. Attackers demonstrated access to footage from medical settings where surveillance systems potentially captured patients and staff. The compromise revealed Verkada’s centralized access to vast quantities of video data from diverse clients, highlighting systemic vulnerabilities in the management of sensitive visual records. No details regarding breach detection methods, containment measures, or forensic investigations were disclosed in available reporting. The incident underscored risks associated with cloud-based surveillance platforms aggregating footage from critical infrastructure sectors without adequate safeguards against large-scale credential compromise or insider threats.