Iowa Ignition Interlock Maker Faces Class-Action Lawsuit After Cyberattack

Lawsuit alleges widespread product failure and data breach affecting tens of thousands of users

Mar. 30, 2026 at 8:55pm

Got story updates? Submit your updates here. ›

An extreme close-up photograph of an ignition interlock device's keypad and display, lit by a harsh, direct camera flash against a pitch-black background, conceptually illustrating the serious and investigative nature of a cyberattack on a critical piece of court-mandated technology.A stark, gritty close-up of an ignition interlock device highlights the critical role these technologies play in the lives of those with drunken-driving convictions, and the consequences when they fail.Des Moines Today

An Iowa-based company that manufactures ignition interlock devices for people with drunken-driving convictions is facing a potential class-action lawsuit. The lawsuit alleges that a recent cyberattack on the company's systems disabled critical network infrastructure, causing widespread product failure and the theft of users' personal and financial information.

Why it matters

Ignition interlock devices are a crucial part of remedial programs that allow people with drunken-driving convictions to continue driving under electronic monitoring. The alleged cyberattack and resulting product failures have disrupted the lives of thousands of users, potentially jeopardizing their ability to legally operate their vehicles and maintain employment.

The details

The lawsuit was filed by Derrick Curry of Worth, Illinois, against Consumer Safety Technology, the Urbandale-based company that does business as Intoxalock. Intoxalock is the leading provider of ignition interlock devices in Iowa, with 177 installation locations across the state. The lawsuit alleges that the cyberattack, which occurred around March 14, 2026, disabled Intoxalock's critical network infrastructure and resulted in the theft of vast quantities of user data, including personal and financial information. This caused 'countless users' to be unable to use their vehicles for over a week, and the plaintiff, Curry, was left stranded when his car suddenly shut off while he was driving.

  • On March 16, 2026, Curry received an email from Intoxalock stating it was experiencing a 'cybersecurity event'.
  • On March 16, 2026, Curry was informed his Intoxalock device would lock him out of his car's ignition system within two hours.
  • On March 16, 2026, Curry's car 'suddenly and dangerously shut off' while he was driving.
  • On March 17, 2026, Curry's Intoxalock device remained nonfunctional, causing him to miss a day of work.
  • On March 18, 2026, Curry was fired from his job due to the continued issues with his Intoxalock device.

The players

Derrick Curry

A resident of Worth, Illinois, who is a participant in Illinois' Monitoring Device Driving Permit program and uses an Intoxalock device on his car.

Consumer Safety Technology

An Urbandale, Iowa-based company that does business as Intoxalock, the leading provider of ignition interlock devices in Iowa.

Got photos? Submit your photos here. ›

What they’re saying

“Aside from the alleged data theft, 'countless users were unable to use their vehicles for over a week, as the outage disabled countless Intoxalocks across the United States'”

— Derrick Curry, Plaintiff

What’s next

The judge will decide whether to grant class-action status to the lawsuit, which could potentially involve tens of thousands of Intoxalock users affected by the cyberattack.

The takeaway

This case highlights the critical importance of ignition interlock devices for those with drunken-driving convictions, as well as the need for robust cybersecurity measures to protect the sensitive personal and financial data of users. The alleged failures of Intoxalock have disrupted the lives of many and raised concerns about the reliability of such court-mandated technologies.