Cyberattack Disrupts Intoxalock Services Nationwide
An Iowa-based company faces backlash as a cyberattack disrupts ignition interlock device services. Users risk losing access to their vehicles amid ongoing issues.
Driving after a DUI conviction can be complicated. Many states mandate the installation of ignition interlock devices to monitor alcohol levels before allowing a vehicle to start.
One widely used device comes from Intoxalock, a company based in Des Moines, Iowa. This device features a small box with a plastic tube where drivers blow to measure their breath alcohol content. To start the vehicle, drivers must register below their state’s legal alcohol limit. In some jurisdictions, the device also utilizes GPS to log locations and takes photos of users during testing.
Intoxalock devices are available for lease, typically costing between $70 and $120 per month. However, passing the initial breath test is just the beginning, as the device requires “random retests” while driving. Users are advised to keep their radio volume low and windows up to hear the device’s beep.
Upon hearing the beep, drivers have a window of 3 to 15 minutes to pull over and retest. Ignoring or failing a retest does not stop the vehicle but may activate the horn and lights to signal the driver to pull over. Depending on local regulations, failing a test may also lead to a temporary lockout.
Additionally, users must have their devices calibrated approximately once a month at a service center. Missing the calibration can result in being locked out of the vehicle.
The situation escalated when Intoxalock experienced a cyberattack on March 14, which rendered their backend systems and databases unavailable. Consequently, users were unable to complete necessary calibrations on time, leading to potential vehicle lockouts. Reports indicated that around 7 to 10 percent of users in Connecticut were affected.
In response to the issue, Intoxalock published a status update on March 18, authorizing local service centers to grant 10-day calibration extensions. However, these extensions did not apply to all device versions or states. The company also pledged to cover any costs incurred by users due to the system outage, including towing fees.
As of March 20, Intoxalock's systems remained down, necessitating an extension of the service pause through March 22. Finally, on March 22, the company announced the resumption of their systems, allowing installations and calibrations to proceed once again.
Meanwhile, users have expressed their frustration on the r/intoxalock subreddit, where some are coordinating potential class-action lawsuits.