Breaches - Intoxalock Cyberattack Causes Vehicle Lockouts
Basically, hackers made it impossible for some cars to start by disrupting a safety system.
A cyberattack on Intoxalock left many drivers unable to start their vehicles. Users across the U.S. faced potential lockouts, leading to frustration and discussions of legal action. Intoxalock has since resumed operations but the incident raises serious concerns about data security.
What Happened
On March 14, Intoxalock, a company providing ignition interlock devices, suffered a cyberattack that rendered its systems inoperable. This incident affected users across the United States who rely on these devices to start their vehicles after DUI convictions. The interlock systems require regular calibrations, and without access to Intoxalock's backend, many users found themselves unable to comply with calibration requirements, putting their ability to drive in jeopardy.
As the situation unfolded, 7–10 percent of users in Connecticut reported issues due to the attack. Intoxalock's devices can lock users out if they miss calibration deadlines, which led to significant concern among those affected, who faced potential vehicle lockouts.
Who's Affected
The impact of the cyberattack extended to a wide range of users across the country. Anyone using Intoxalock devices, which are mandatory for many drivers with DUI convictions, found themselves in a precarious position. The company acknowledged the disruption and announced that they would cover costs incurred by users, including towing fees resulting from the system outage.
Social media platforms, particularly Reddit, became a hub for frustrated users. Many shared their experiences and began discussing the possibility of organizing class-action lawsuits against Intoxalock for the inconvenience and potential legal ramifications of being unable to drive.
What Data Was Exposed
While the exact nature of the cyberattack remains unspecified, the incident highlights vulnerabilities in systems that support safety-critical devices. The attack not only disrupted calibrations but also raised concerns about the security of user data and the integrity of the interlock systems. Users are now questioning how their personal information is protected and what measures Intoxalock has in place to prevent future incidents.
Intoxalock's systems resumed operations on March 22, but the damage was done. Users were left wondering about the reliability of the devices they depend on for compliance with legal requirements.
What You Should Do
For current Intoxalock users, it is crucial to stay informed about any updates from the company regarding system security and operational status. Make sure to check your device's calibration status regularly and ensure that you complete any outstanding requirements as soon as possible. If you experienced issues due to the cyberattack, consider documenting your experiences and reaching out to Intoxalock for compensation.
Moreover, users should remain vigilant about their personal data security and consider discussing potential legal actions with a qualified attorney if they feel their rights have been violated. As the situation develops, it will be essential to monitor Intoxalock's response to ensure that similar incidents do not occur in the future.
Ars Technica Security