Cyber Incident Victim: Navia Benefit Solutions
Date:
Mar 2026
Location:
United States of America
Summary
Intoxalock, a provider of vehicle‑mounted breathalyzer devices, reported a cyberattack that forced it to take systems offline, disrupting the calibration service required for the devices to allow vehicle ignition. As a result, drivers whose units were due for calibration found their cars unable to start, leaving them stranded in locations ranging from the East Coast to the Midwest. The company said it is offering temporary calibration extensions and arranging towing assistance while it works to restore services, but it has not disclosed the nature of the attack or whether any user data was compromised.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 0 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On March 14 2026 Intoxalock experienced a cyberattack that prompted the company to announce on its website that its systems were currently experiencing downtime. Intoxalock, which sells vehicle‑mounted breathalyzer devices used by drivers required to provide a negative alcohol sample to start their cars, reported that it had temporarily paused some of its systems as a precautionary measure. The company’s technology is deployed in 46 states and serves approximately 150,000 drivers across the United States. Intoxalock spokesperson Rachael Larson confirmed the attack to TechCrunch but did not disclose the specific nature of the incident, such as whether it involved ransomware or a data breach.
The breathalyzer devices require periodic calibrations that depend on a connection to Intoxalock’s servers; the downtime prevented drivers whose devices were due for calibration from completing the required update. As a result, drivers reported being unable to start their vehicles, with posts on Reddit describing cars as “giant paperweights” and auto shops noting vehicles parked for days due to the lockouts. Affected drivers were reported across multiple states, including Maine, New York, and Minnesota, and the company acknowledged that customers whose devices needed calibration might experience delays starting their vehicles. In response, Intoxalock began offering 10‑day extensions on calibration deadlines and, in some cases, arranged towing services for stranded motorists.
Intoxalock has not provided an estimated timeline for restoring normal operations and has not shared any details about communications from the attackers or any ransom demands. The company’s public statements have been limited to confirming the cyberattack, describing the temporary system pause, and outlining the mitigation steps being offered to affected users. No information has been released regarding potential exposure of user data or the specific attacker motives.