zaicurity2d ago
BrianKrebs

ICYMI (from the not-all-cyber-news-is-horrible dept), a cyberattack on a U.S. vehicle breathalyzer company has left drivers across the United States stranded and unable to start their vehicles. This story positively cries out for a headline-writing contest. TechCrunch reports:

"The company, Intoxalock, says on its website that it is “currently experiencing downtime” after a cyberattack on March 14. Intoxalock sells breathalyzer devices that fit into vehicle ignition switches, and is used by people who are required to provide a negative alcohol breath sample to start their car."

https://techcrunch.com/2026/03/20/cyberattack-on-vehicle-breathalyzer-company-leaves-drivers-stranded-across-the-us/

Cyberattack on vehicle breathalyzer company leaves drivers stranded across the US | TechCrunch

A cyberattack on a U.S. car breathalyzer company has left drivers across the United States reportedly stranded and unable to start their vehicles.

TechCrunch
Mar 23 at 4:10pmWeb
Show threadMark Stosberg2d ago

@briankrebs Alt headlines:

Cyberattack blows for Intoxalock
Intoxalock sobered by cyberattack

Show threadBrianKrebs2d ago
@markstos Booze Cruisers Blue After Intoxalox Locked
Show threadKoos van den Hout2d ago
@briankrebs company statement: "The company said customers whose devices require calibration may experience delays starting their vehicles."
"Customers" (although I think it's hard to switch vehicle breathalyzer lock company): "Drivers posting on Reddit say that cars are unable to start if they miss a calibration, effectively locking drivers out of their vehicles."
Why do we let companies get away with being so economical with the truth?
Show threadAlex@rtnVFRmedia Suffolk UK2d ago
@briankrebs seems like an unusually specific target TBH - I wonder if it was done simply because their systems were weak, or were they singled out for what they do (and that the victims wouldn't get as much sympathy compared to something like a hospital or school?)
Show threadJonathan Kamens 86 472d ago
@briankrebs I dunno this seems kind of horrible? A lot of people's lives would be dramatically upended if they were suddenly unable to start their cars.
Show threadBrianKrebs2d ago
@jik That is undoubtedly true. At least they will save on gas right now.
Show threadBrad Macpherson2d ago
@jik @briankrebs The fewer cars on the road, the fewer deaths. Win-win.
Show threadZardoz2d ago
“Power drunk corp/gov blow Hot in latest failure..”
Show threadSterling2d ago

@briankrebs
My first thought: Divine intervention.

My second thought: I guess these devices have been "enshitified" sufficiently now. WTF are they connected ...why?

Show threadSerf de Web2d ago
@briankrebs
Who thought this was a good solution in the first place? Drunk drivers should lose their licenses for a few years, at least. Period. Tech can't solve a policy failure, even when it works.
Show threadOsteopenia Powers ;2d ago
@briankrebs
Available in all new US cats soon!
Show threadAdam Katz2d ago
@briankrebs @zackwhittaker what does this product do if you're parked in a basement or at a mountainside trailhead and have no connectivity?
Show threadwavefunction2d ago
@briankrebs gotta use that famously robust public transit system to get around. </s>
Show threadgary2d ago
@briankrebs go home Intoxalock, you're drunk
Show thread4am ❧2d ago
@briankrebs there's still time to delete this terrible take, Brian
Show threadBrianKrebs2d ago
@a2_4am It's consistent with my belief that we routinely let drunk drivers back on the road via a variety of too lenient enforcement schemes. DUI should IMO lead to automatic license suspension for a meaningful amount of time, several years.
Show thread4am ❧1d ago
@briankrebs there's a very wide gap between "I believe the law should be more punitive here" and "it is great and also funny that these people who must prove their ongoing legal compliance with state-mandated tech suddenly can't do that." I've read a lot of your work over the years, and I've never felt like you punched down. This feels like punching down.
Show threadAna Bollocks / Kristin C.1d ago
@briankrebs @a2_4am I agree with you, but also: are their customers only drunk drivers? I wonder if there aren't transportation companies that install these to lessen exposure from impaired drivers. Because it seems like we don't enforce drunk driving laws enough to keep companies like this in business.
Show threadGeert Uytterhoeven1d ago
@anabollocks @briankrebs @a2_4am Some people are advocating to make them mandatory on all new vehicles.
Show threadMatt Hall2d ago

@briankrebs

Silly question, I _know_... But why the hell would one of these need to communicate with the network?

If it's fitted to your vehicle it _won't_ start without a good test.

The point of control is _at the car_.

👀

AITA?

Show threadCarina C. Zona1d ago
@401matthall there are a lot of connected devices that don't need to be, but this is not one of them. If someone is on probation for DUI and required to prove they are sober before driving, then yeah a failed test needs to be transmitted to someone for followup. Presumably the probation officer.
Show threadMatt Hall1d ago

@cczona

Eh, "bring your vehicle to your probation appointment and we've got a reader there" seems like a better solution than a cell-equipped device in my car that determines whether or not my car can start.

I agree about the monitoring and failed testing in general but... This could literally leave someone stranded. I dunno.

Show threadCarina C. Zona1d ago
@401matthall An attempt to drive drunk while on probation deserves to be greeted with immediate intervention. It's not just some incidental data point to pick up on a week later. The person's judgement is impaired and they have decided to again flout public safety. Someone needs to be notified promptly, before they figure out an alternative way to act on that recklessness.
Show threadmaco1d ago

@401matthall @cczona if they’re drunk and fail the test, leaving them stranded (pending a call to a taxi company) is in fact the expected and intended result.

Yes, in this case they’re being stranded regardless of BAC, but “they should never be stranded” is absolutely not the point of these devices.

Show threadaspragg1d ago

@401matthall @briankrebs From the fine article, ¶4:

> These breathalyzer devices need to be calibrated every few months or so, but the cyberattack has left Intoxalock unable to perform these calibrations. The company said customers whose devices require calibration may experience delays starting their vehicles.

Show threadJoan of Contention 😷1d ago

@briankrebs

Hey presto: road safety.

Show threadJoan of Contention 😷1d ago

@briankrebs

Alternative headline: "Intoxalock gets locked!"

("Locked" is slang for drunk in parts of Ireland..)

Show threadLina Inverse1d ago
@briankrebs Yes, this is fucking horrible. How many people will miss jobs, doctor appointments, and otherwise because of this? If as you state you want accountability for people who have had DUIs, then maybe consider that them losing emplyoment because they can't get to their job is a fast way to spiral into drinking again. That's assuming that losing their job doesn't also violate terms of their parole, which send them back to prison. This is how the justice system works and I implore you to get educated about it. This is a two things can be true at once situation. To be clear, I am not giving anyone a pass for DUI. Setting up someone to fail is also irresponsible and should be treated with the contempt it deserves. The fact that this system was allowed to be used without ensuring the "A" part of the CIA triad is the information security failure specific part of it.