Intoxalock Cyberattack Left DUI Offenders Unable to Start Their Cars Across the US

Intoxalock Cyberattack Left DUI Offenders Unable to Start Their Cars Across the US

A cyberattack on Intoxalock, one of the largest ignition interlock device providers in the US, disrupted backend systems for over a week, leaving thousands of DUI offenders unable to calibrate their devices and at risk of being locked out of their own vehicles.

The Attack

• Target: Intoxalock, based in Des Moines, Iowa — one of the most common ignition interlock providers
• Date: Cyberattack hit on March 14, 2026
• Duration: Systems down from March 14 through March 22 (8 days)
• Impact: 7-10% of users in some states couldn't calibrate on time
• Nature: Cyberattack type not publicly specified

What Are Ignition Interlocks?

Devices required for DUI offenders to start their vehicles:

• Breath test: Driver blows into a tube; alcohol must be below legal limit
• Monthly calibration: Required by law; missing calibration triggers lockout
• Cost: $70-120/month lease fee
• Random retests: During driving, must pull over and re-test
• GPS tracking: Some states log location and take photos

The Impact

• Calibration impossible: Backend systems down meant no calibration appointments
• Vehicle lockouts: Users who missed calibration windows couldn't start cars
• Tow fees: Some users incurred towing costs for disabled vehicles
• Class action brewing: Users on Reddit organizing lawsuits

Intoxalock's Response

• March 18: Authorized 10-day calibration extensions at service centers
• Compensation: Promised to pay all costs including tow fees from the outage
• March 22: Systems finally restored; installations and calibrations resumed

Why This Matters

This incident highlights the vulnerability of Internet-connected automotive safety devices:

1. Single point of failure: Cloud-dependent interlocks can leave users stranded
2. Captive users: DUI offenders have no choice but to use these systems
3. Physical consequences: Digital outages have real-world mobility impacts
4. Supply chain risk: IoT devices in safety-critical applications need better resilience

Source: Ars Technica | KIRO 7 | Reddit r/intoxalock