Croton's license plate readers feed a county database that is now being sued

In January, Croton's Police Advisory Committee was assured that plate data is not available to ICE without a judicial warrant. In June, a class-action lawsuit alleged the county database holding Croton's scans is shared with more than 50 outside agencies — including ICE. Separately, the company whose software reads the plates is warning investors it may not survive the year intact.

croton.news · July 22, 2026 · drawn from the village meeting record and cited public sources

The cameras Croton actually has

Croton-on-Hudson's fixed public cameras are easy to miss in the village's records, because they arrived quietly. The Village Board authorized a contract with Rekor for a license plate reader system in the summer of 2022 — $9,716, disclosed in the Mayor's Newsletter of August 3, 2022 — and the program has run ever since with no dedicated public webpage, no posted signage, and, until this year, almost no board discussion. [EFF Atlas of Surveillance, listing Croton PD's ALPRs as Rekor-vendored, in use since at least 2022]

The clearest public description the village has produced came at the Police Advisory Committee's January 15, 2026 meeting, in a briefing by Detective Fielding recorded in the committee's minutes: "The License Plate Reader cameras are Mobotix brand and data is stored by Rekor. License Plate Reader information is stored at the County Real Time Crime Center." Mobotix is a German camera manufacturer; Rekor is the Maryland software company whose artificial intelligence reads the plates; the Real Time Crime Center is the Westchester County Police Department facility, established in 2017, that pools camera data for the county's roughly 40 police agencies. [PAC minutes, 1/15/2026; Mobotix Westchester case study, 2021]

Membership has terms. Croton PD cannot pull images itself — it "must go through the RTC to access the cameras images," per the minutes — and participation requires staffing: Detective Fielding works at the county center one day per week. The committee was told the county keeps plate numbers "approximately 3 years" and the wider overview photos for 10 days, that the data is incident-specific rather than a tool for analyzing patterns of movement, and — in an assurance that would look different five months later — that "data is not available to ICE or other agencies without a judicial warrant." [PAC minutes, 1/15/2026]

The village's adopted FY2026-27 budget shows what the system costs to keep running: $4,800 for LPR internet service, $4,268 for LPR site maintenance, $1,800 for radar and LPR unit repairs, and a line for seven wireless cameras at $3,192 — plus, in a separate fund, an $8,190 "LPR Service Agreement" for the plate readers that enforce permits in the village's commuter parking lots. Roughly $22,000 a year, all in. [Adopted Budget FY2026-27, Detail of Expense Appropriations]

Everything else is still on paper. A Croton-specific state law signed October 27, 2025 (Chapter 486) authorizes red-light cameras at up to three intersections — the police chief's recommended sites are the two Route 9 ramps at Croton Point Avenue and Municipal Place/South Riverside — but the board has not begun implementation, and the village has no vendor. A school speed-zone camera program exists only as a home-rule request to Albany, re-adopted three times this spring as the state bill was revised. Security cameras for Croton Landing and Senasqua parks are budgeted in this year's capital plan after a one-year deferral. [A8360-A / Ch. 486 of 2025; work session 12/4/2025; BoT 6/2/2026; capital plan session 4/16/2026]

Line chart: all index crime per 1,000 residents, 1997-2024, for 8 Westchester river villages. Croton-on-Hudson, highlighted, falls from about 20 per 1,000 in the late 1990s to under 5 by the mid-2010s, ending near 7 in 2024 - below the Westchester County and New York State context lines throughout recent years.
The crime backdrop to the camera debate: index crime per 1,000 residents, 1997–2024, Croton-on-Hudson highlighted against seven river villages, with Westchester County and New York State shown dashed. Croton's rate has run below both county and state for years. Source: NYS Division of Criminal Justice Services index-crime counts, per-1,000 rates via Census population. Interactive version.

Residents have noticed the cameras even if the record barely does. The PAC's minutes acknowledge "a vocal group of residents are opposed to any government cameras within the village"; Trustee Nora Nicholson said in May that "the rumoring is pretty intense" and proposed a public camera Q&A; the committee has been planning an education campaign since January and a community survey runs September 15 to October 15. At the May 20 board meeting, Mayor Brian Pugh offered the village's most direct public defense of its choices: Croton's camera data "is hosted by the Westchester County Police Department and is not cloud based," per the minutes — and, of vendors, "I won't name names, but there's one that's been in the news lately. You can look it up if you're curious. We don't use that one." The reference lands on Flock Safety, the ALPR giant whose cameras dozens of American towns have canceled since 2025 over revelations that its national lookup network was used for immigration enforcement. [PAC minutes 1/15/2026; transcript 5/20/2026; BoT minutes 5/20/2026; 404 Media, 5/2025; NPR, 2/17/2026]

The village's two official descriptions of its own system — the mayor's "not cloud based" and the PAC minutes' "data is stored by Rekor" — sound contradictory but turn out to be reconcilable. Rekor sells its Scout software two ways: hosted in Rekor's own AWS cloud, or self-hosted on servers the customer runs, with plate data in a local database. Rekor's official documentation describes both options. Westchester runs the self-hosted kind: the county operates a Rekor/OpenALPR login portal at a westchestergov.com address on network space publicly registered to the County of Westchester — not on Rekor's cloud — and the Umemoto complaint describes the county paying Rekor roughly $30,000–44,000 a year for "access to Rekor Scout" and maintenance, with the county running the system out of its Real Time Crime Center. "Stored by Rekor," in other words, means stored in Rekor's software, licensed and administered for the county — on the county's infrastructure. The mayor's description holds up. [Rekor Scout self-hosted documentation; deployment options; Umemoto complaint ¶¶33, 61, 72; DNS/ARIN registration checks, 7/22/2026]

But county-hosted is not the same as county-confined — and here the record gets uncomfortable. The Umemoto complaint states the county "has chosen to enroll in Rekor's Public Safety Network," which "shares real-time and historical vehicle surveillance data with every other law enforcement agency that uses Rekor software and enrolls in the network" — and Rekor "does not provide a public list" of members. Rekor's own current terms of service go further: "By using law enforcement products in the Services, you agree to share your Data with other law enforcement agencies, unless you affirmatively opt-out" — sharing is the default, and opting out requires written notice. Whether the county — or Croton, for its own contract — ever filed that opt-out is not in any public record found. croton.news has filed a Freedom of Information Law request with the village for its Rekor agreement and any opt-out or data-sharing election, and will report what comes back. [Umemoto complaint ¶58; Rekor Privacy and Terms, updated 2/10/2025]

The lawsuit — and what it reaches in Croton

On June 9, 2026, four Westchester drivers filed a class-action complaint, Umemoto v. Westchester, with the Westchester County Clerk (Index No. 65935/2026, State Supreme Court), naming the county, its Department of Public Safety, and its commissioner and chief; the suit was announced publicly two days later. Brought by the New York Civil Liberties Union, the Policing Project at NYU Law, the Knight First Amendment Institute at Columbia, and the firm Freshfields, it alleges the county built a network of roughly 600 cameras holding 1.6 billion accumulated scans, retained for two years and searchable without a warrant or individualized suspicion — and that the system was never authorized by the county Board of Legislators, violating the state constitution's separation of powers. One named plaintiff's car was scanned more than 2,400 times. Of the 264 million plate recordings collected in 2024, the NYCLU says, over 99 percent were unrelated to any suspected crime. [Complaint, filed stamp 6/9/2026; Policing Project case page; NYCLU, 6/2026; Fortune/AP, 6/11/2026]

The county has said the complaint contains "legal and factual errors." [The Examiner News]

For Croton's deployments, the suit matters in at least four concrete ways — and the first is the largest.

First, the ICE question: the suit directly contradicts what Croton was told. This is the collision at the center of the story. In January, the village's Police Advisory Committee received a specific, recorded assurance about its plate readers:

"Data is not available to ICE or other agencies without a judicial warrant and only information requested with that warrant can be shared." — PAC minutes, Jan. 15, 2026

Five months later, the Umemoto complaint and the NYCLU's accompanying research allege the opposite about the county system where Croton's data lives: that access is shared with more than 50 outside agencies, including ICE — not through judicial warrants, but as participants in the system. [NYCLU commentary, 6/17/2026; Fortune/AP, 6/11/2026]

Both statements cannot fully describe the same database. The village's briefing may faithfully reflect what Croton was told by the county — the contradiction is not evidence that anyone in Croton misled anyone. But the stakes are concrete: a village that has publicly distanced itself from the vendor at the center of the national ICE-lookup scandal ("we don't use that one") is feeding its scans into a county system now accused, in court, of the same category of sharing. Every Croton-on-Hudson plate scan since 2022 is potentially within reach of whatever access the county actually grants. "Does Croton's plate data reach ICE?" now has two conflicting public answers, and only the village and county can resolve which one is true. [PAC minutes 1/15/2026; transcript 5/20/2026]

Second, Croton's data is inside the case. The village's own minutes say its LPR data "is stored at the County Real Time Crime Center." Whatever the court decides about that database — up to and including the plaintiffs' request that the system be declared unlawful — decides the fate of the back end Croton's cameras depend on. The village owns cameras; the county owns the system that makes them useful.

Third, the numbers don't line up. Croton's committee was told plates are kept about three years; the NYCLU describes a two-year county retention policy (and alleges some data is held longer). Which schedule governs a scan made by a Croton camera is not answered anywhere in the public record. [PAC minutes; NYCLU]

Fourth, the legislature may move first. Bills drafted with the NYCLU (A.10808/S.9890) would restrict license plate reader use statewide to felony investigations, stolen vehicles, and missing persons. If enacted, that would rewrite the rules for Croton's readers regardless of how the lawsuit ends. [NYCLU]

There is also precedent one county over from the lawsuit's theory. Westchester's system has already produced the best-known example of ALPR pattern policing in the country: the 2023 case of David Zayas, flagged by the county's Rekor-powered AI because his driving patterns resembled a drug courier's — reporting that led a defense attorney to call the system "dragnet surveillance." Croton's committee was told its data "is not compiled to allow officers to analyze large groups of people to narrow down behavior." At the county level, Forbes' reporting suggests the capability exists. [Forbes, 7/17/2023; PAC minutes]

Separately: the company reading the plates is in trouble

Rekor Systems — the vendor on Croton's 2022 contract and the AI supplier for the county system — is a publicly traded company in visible financial distress.

Its annual report, filed March 31, 2026, shows revenue of $48.45 million for 2025 against a net loss of $31.46 million — an improvement on 2024's $61.4 million loss, but the filing goes further. In management's own words: "the existing cash is insufficient to fund its current level of operations for the next twelve months following the issuance of these consolidated financial statements. These factors raise substantial doubt regarding the Company's ability to continue as a going concern." The company's auditor attached a going-concern explanatory paragraph to its opinion. Rekor raised about $13.9 million in a December 2025 stock offering; as of March 31, 2026 it reported $12.6 million in cash (including restricted cash) against roughly $15 million in long-term debt, including notes that come due in December 2026. [Rekor Systems Form 10-K, filed 3/31/2026; figures confirmed via SEC EDGAR company facts; Q1 2026 10-Q]

On April 27, 2026, Nasdaq notified Rekor that its stock had traded below the $1.00 minimum bid price; the company has until October 26 to regain compliance, with a reverse stock split among its options. [SEC Form 8-K, 5/2026]

Rekor has responded to the industry's broader crisis by positioning itself as the responsible alternative: on July 8, 2026 it published a "Privacy and Evidence Architecture" white paper explicitly framed against "the Flock backlash," conceding that "legitimate issues are being raised around privacy... data retention and sharing, auditability, and evidentiary trust." That is marketing, not policy — but it is notable that Croton's own vendor now publicly concedes the premise of the criticism. [GlobeNewswire, 7/8/2026]

For a village whose entire program rides on a $9,716 contract and $22,000 a year in maintenance lines, the practical question is continuity: what happens to Croton's readers, and to the scan data they have generated since 2022, if the vendor is acquired, restructures, or fails? Nothing in the village record addresses it.

What to watch

The county's formal answer in Umemoto; the village's response to croton.news's FOIL request for the Rekor contract and any written opt-out from Rekor's default law-enforcement data sharing (acknowledgment is due within five business days) — and which retention schedule governs Croton-originated scans; whether the Board of Trustees takes up the dormant red-light authorization (which sunsets in 2030 and carries mandatory annual crash-and-revenue reporting if used); the fate of the speed-camera bill in Albany; the PAC's community survey (September 15–October 15), which may produce the first structured measure of what Croton residents actually think about the cameras; Rekor's October 26 Nasdaq deadline and December debt maturity; and the promised village education campaign — proposed in January, not yet delivered.

Sources & methods: Village statements are quoted from official meeting minutes and meeting transcripts on this site (linked inline; one minutes quotation normalizes a PDF ligature in "officers"). The Umemoto filing date and index number are read from the complaint's court stamp. Rekor's revenue, net loss, cash, debt, and going-concern language were verified directly against SEC EDGAR filings. The claim that Westchester self-hosts its Rekor server rests on the county's own Rekor login portal (dpslpr.westchestergov.com) resolving to county-registered network space, checked July 22, 2026 — network control, not physical location. The county's response to the lawsuit is characterized from The Examiner News' headline. Corrections welcome: see our editorial policy.

Sources