9 Investigates

9 Investigates hacked surveillance cameras across Central Florida

ORLANDO, Fla. — Security cameras are supposed to protect people from burglars and other criminals, but 9 Investigates found a Russian website that has hacked into thousands of security cameras all over the world, including more than 100 in Central Florida.

Chef Scott Earick, owner of Scott’s on Fifth in Indialantic, has had a webcam in his kitchen for several years.

"People can tune in to the camera and see what’s going on in the kitchen,” Earick told Channel 9’s Jeff Levkulich.

A couple of years ago, two national security agents stopped by his restaurant and asked him why his camera was part of a Russian security camera website called Insecam.

“People don’t know they are being watched,” Earick said. “And I kind of want to know why I am on a Russian website too.”

Earick is not alone. 9 Investigates uncovered that there are thousands of security cameras on the site. More than 100 cameras on the page are located in Central Florida, including private cameras inside of homes, doctor offices and even a day care center.

9 Investigates tracked down a business owner in Ormond Beach through Insecam who had no idea her security camera was on the website.

Gaelan Adams, of Hack@UCF, said he doubts there is Russian conspiracy.

"So the website is run by a gentleman who was there to point out all these flaws and vulnerabilities in webcams and how there needs to be better security protections?“ Adams said.

Adams said since some the cameras are on the website 24 hours a day, it could present a security issue for business owners, as well as homeowners.

"If they break in, they know how long they have. What happens if you go to work for the day? It only takes a couple of days to monitor these cameras to figure out who is there and who is not,” Adams said.

9 Investigates drove around neighborhoods in what’s called wardriving to see how vulnerable home internet security can be and found several open Wi-Fi networks.

"It’s telling if they have passwords, what their signal strength is. And if we had a GPS unit, we could also map this over Google Maps.  So we could see where all the Wi-Fi networks are,” Adams said.

Agent Jason Cook with the Florida Department of Law Enforcement told 9 Investigates that the human element is the weakest link in security.

"It’s us not having good enough passwords. Not having passwords at all, not updating your security software or your firewalls. Not upgrading your equipment,” Cook said.

According to the Insecam website, they use only filtered cameras; that way, none of the cameras invade anybody’s private life.  The site said unethical cameras will be removed immediately upon an email complaint. Insecam said the easiest way to make sure your camera is not accessible is to set a password on your security camera.