{"id":"intoxalock-cyberattack-driver-lockouts-mar-2026","category":"breach","status":"closed","title":"Intoxalock cyberattack strands some US drivers; calibration services restored","tldr":"A March cyberattack disrupted Intoxalock’s required ignition-interlock calibrations, leaving some US drivers unable to start their cars. Services resumed on 22 March. Follow device prompts and contact your service centre about any remaining lockout.","summary":"A cyberattack beginning on 14 March disrupted Intoxalock’s ignition-interlock service systems in the US. These in-car breathalysers require regular calibration; some customers due for that maintenance were unable to start their vehicles during the outage. Intoxalock introduced 10-day extensions where permitted and promised to cover costs directly caused by the disruption, excluding ordinary calibration charges. It announced that installations, calibrations and service-centre support had resumed on 22 March, although locked-out customers could still need their vehicles taken for calibration. The attack method and whether customer data was stolen remain unconfirmed in the sources reviewed. Lawsuits followed: the Strahl proceedings were paused until February 2027, while a separate case had a response deadline extended in September. No final litigation outcome was established by the records reviewed through 3 November.","action":"If your Intoxalock device still shows a lockout or overdue calibration, contact your service centre and follow the device prompts. Keep receipts for outage-related towing and ask Intoxalock about reimbursement; normal calibration fees remain payable. There is no customer software update to install for this incident.","product":"Intoxalock ignition-interlock calibration and installation services","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["intoxalock","cyberattack","service-outage","vehicles","united-states"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Intoxalock Status Center","url":"https://learn.intoxalock.com/status","by":"Intoxalock","date":"2026-03-24"},{"kind":"news","title":"Intoxalock Resumes Service Following Cyberattack","url":"https://www.ceoutlook.com/2026/03/23/intoxalock-resumes-service-following-cyberattack/","by":"CEoutlook","date":"2026-03-23"},{"kind":"news","title":"Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US","url":"https://techcrunch.com/2026/03/20/cyberattack-on-vehicle-breathalyzer-company-leaves-drivers-stranded-across-the-us/","by":"TechCrunch","date":"2026-03-20"},{"kind":"news","title":"CT drivers caught up in cyberattack on breathalyzer company","url":"https://www.ctpublic.org/news/investigative/2026-03-22/intoxalock-cyber-attack-ct-breathalyzer-devices","by":"Connecticut Public","date":"2026-03-22"},{"kind":"post","title":"Strahl v. Consumer Safety Technology, LLC — federal court docket","url":"https://dockets.justia.com/docket/iowa/iasdce/4%3A2026cv00130/93832","by":"Justia","date":"2026-07-30"},{"kind":"post","title":"Million v. Consumer Safety Technology, LLC — federal court docket","url":"https://dockets.justia.com/docket/iowa/iasdce/4%3A2026cv00302/94825","by":"Justia","date":"2026-09-17"}],"started":"2026-03-14","closed":"2026-09-17","created":"2026-11-03T21:47:03.431Z","updated":"2026-11-03T21:47:03.431Z","cve_notes":[],"timeline":[{"at":"2026-09-17","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"In Robert Million’s separate lawsuit against Intoxalock, the court extended the company’s deadline to respond to 26 October 2026. The reviewed docket does not establish a subsequent outcome.","url":"https://dockets.justia.com/docket/iowa/iasdce/4%3A2026cv00302/94825","by":"Justia","patch":null},{"at":"2026-07-30","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"The court paused the Strahl proceedings until 1 February 2027 and required a status report by 22 January 2027.","url":"https://dockets.justia.com/docket/iowa/iasdce/4%3A2026cv00130/93832","by":"Justia","patch":null},{"at":"2026-03-24","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Oliver Strahl filed a federal lawsuit against Consumer Safety Technology, which trades as Intoxalock, in the Southern District of Iowa.","url":"https://dockets.justia.com/docket/iowa/iasdce/4%3A2026cv00130/93832","by":"Justia","patch":null},{"at":"2026-03-22T21:30Z","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Intoxalock announced that installation, calibration and service-centre support systems had resumed. Customers who missed calibration without receiving an extension still needed their vehicles taken to a service centre.","url":"https://learn.intoxalock.com/status","by":"Intoxalock","patch":null},{"at":"2026-03-18","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"Intoxalock introduced a process for affected customers to receive 10-day calibration extensions. It also said it would cover costs directly caused by the system pause.","url":"https://www.ctpublic.org/news/investigative/2026-03-22/intoxalock-cyber-attack-ct-breathalyzer-devices","by":"Connecticut Public","patch":null},{"at":"2026-03-15T22:45Z","added":"2026-11-03T21:45:10.669Z","kind":"disclosed","text":"Intoxalock publicly acknowledged a cybersecurity incident affecting its ability to serve customers and said it was investigating.","url":"https://learn.intoxalock.com/status","by":"Intoxalock","patch":null},{"at":"2026-03-14","added":"2026-11-03T21:45:10.669Z","kind":"other","text":"The cyberattack began, disrupting Intoxalock’s calibration services. Some drivers whose devices needed calibration could no longer start their cars.","url":"https://www.ceoutlook.com/2026/03/23/intoxalock-resumes-service-following-cyberattack/","by":"CEoutlook","patch":"na"}],"url":"https://hard.fyi/live/intoxalock-cyberattack-driver-lockouts-mar-2026/","json":"https://hard.fyi/api/live?id=intoxalock-cyberattack-driver-lockouts-mar-2026"}