The Prank: World’s First Waymo DDoS
A 23-year-old software engineer named Riley Walz coordinated 50 people to simultaneously summon Waymo robotaxis to San Francisco’s longest dead-end street near Coit Tower on Telegraph Hill. Nobody got in. The cars waited 10 minutes, charged each participant a $5 no-show fee, and drove away. Waymo disabled rides in a 2-block radius until morning. No laws were broken. Walz described it as the “world’s first Waymo DDoS.”
The Blackout: 1,593 Bricks on City Streets
A fire at a PG&E substation knocked out power to 130,000 San Francisco residents. Traffic signals went dark. Waymo’s robotaxis, programmed to treat dark signals as four-way stops, began requesting remote confirmation before proceeding through each intersection. The company’s 70 remote operators were overwhelmed. 1,593 vehicles stalled for two minutes or more. A 911 dispatcher sat on hold with Waymo’s first responder hotline for 53 minutes.
These two incidents are separated by five months and very different in tone. One was a prank dreamed up by a tech hobbyist with a taste for systems satire. The other was a citywide emergency that exposed what happens when a private fleet of autonomous vehicles becomes infrastructure-in-practice without being treated as infrastructure-in-planning. The prank matters because it demonstrated something important: a coordinated human action — no hacking, no laws broken, nothing more sophisticated than a ride-hailing app — could bring a portion of the Waymo network to a standstill and trigger a service suspension. The blackout matters because it showed what that same vulnerability looks like at scale, during an actual emergency, with real stakes.
For dispatch professionals, neither incident is primarily a technology story. Both are a communications and resource story. The question this exercise asks is the one your comm center will eventually have to answer: what do you do when a vehicle on your streets has no driver, belongs to a private company, is blocking an intersection or an emergency access route, and nobody at that company is picking up the phone?
“We experienced significant delays in connecting with Waymo. Our dispatchers were placed on hold for long periods of time and made a total of 31 calls to the Waymo first responder hotline.”
— Mary Ellen Carroll, Executive Director, San Francisco Department of Emergency Management, March 2026 Board of Supervisors hearingCarroll also noted that first responders ended up becoming “default roadside assistance” for stalled Waymo vehicles — a role that pulled them away from life-safety calls. One firefighter spent time moving a stalled robotaxi out of an intersection instead of responding to a call. San Francisco Supervisor Bilal Mahmood put it plainly at the hearing: “What I’m hearing mostly is that you kind of still expect our first responders to do roadside assistance, and you are just going to help us train them better to do that.”
In Austin, Texas, during a separate incident, a Waymo was filmed blocking a street that first responders were attempting to access during a mass shooting scene. The pattern across cities is consistent: autonomous vehicles, when they fail, fail in the roadway, often at intersections, and they require some form of human intervention to move — intervention that either comes from a remote Waymo operator (reachable by phone, eventually) or from a first responder on scene who has now become an unplanned tow truck driver.
After Waymo phased out in-car safety monitors in June 2024, the San Francisco Municipal Transportation Agency was forced to create a new category for emergency and transit dispatchers: “Driverless Car Incidents.” Average call time from the Traffic Management Center to Waymo to resolve a stall: approximately 20 minutes. Your center may not have Waymos yet. But the category is coming.
No right or wrong answers. Click to expand.
Most centers do not yet have a specific call type for this scenario. It likely gets logged as a traffic hazard, abandoned vehicle, or obstruction — none of which capture what it actually is. That matters because the response is different. You cannot dispatch a tow truck to an autonomous vehicle without the owner company’s involvement. You cannot tell the driver to move it. Your traffic unit cannot write a citation to the car.
San Francisco had to create a new CAD category called “Driverless Car Incidents” specifically because existing categories did not fit the problem. The question for your agency: do you have autonomous vehicles operating in your jurisdiction now? If yes, what is your call type, and does your dispatcher know what number to call? If no, when does that change, and when does your protocol get updated?
The phone number for Waymo’s first responder line, for reference: 1-877-503-0840. That is also the number that put a San Francisco dispatcher on hold for 53 minutes during a blackout.
Vendor hotlines are designed for isolated incidents. They are not scaled for simultaneous system-wide failures. The same event that requires you to call the hotline is likely the same event that is overwhelming the hotline. This is structurally true for autonomous vehicle companies, for CAD system vendors, for utility companies, and for any private system that embeds itself in public infrastructure without a public-sector redundancy.
For dispatch professionals, the lesson is: the hotline is your last resort, not your plan. The plan is what you do when nobody picks up. Does your center have a protocol for when a critical vendor is unreachable during a major incident? San Francisco’s solution was to have the mayor personally text the CEO. That is not a protocol — that is improvisation at the executive level. The gap between what the law requires (30 seconds for emergency geofencing response under a proposed California bill) and what actually happened (53 minutes on hold) is where your planning lives.
The Walz prank was a novelty. But it demonstrated a real attack surface: if 50 people with smartphones can briefly disable Waymo service in a 2-block area, a larger coordinated action with worse intentions could do significantly more. The prank was the proof of concept. The question for emergency management is whether similar manipulation of autonomous systems — ride-share, delivery, logistics — could be used deliberately during a crisis to slow emergency response or create diversionary incidents.
This is not a hypothetical that needs a policy answer today. But it is a conversation worth having with your jurisdiction’s emergency management office before autonomous vehicle density in your city makes it operationally relevant. The communication between private autonomous vehicle operators and public safety agencies is still largely informal in most cities. The DDoS prank is a useful training hook because it is nonthreatening enough to discuss openly, while pointing directly at a real vulnerability.
Supervisor Mahmood nailed it at the hearing: Waymo’s answer was essentially “we will train your first responders to do our roadside assistance better.” That is not a satisfactory answer. First responders are not Waymo employees. Every minute a firefighter spends moving a stalled robotaxi is a minute they are not available for a medical call, a fire, or an extrication.
For dispatch professionals, this is an advocacy conversation as much as an operational one. If autonomous vehicles are going to operate in your jurisdiction, the question of who bears the cost of their failures needs to be answered before the failure happens. Does your agency have a formal relationship with any autonomous vehicle operators in your jurisdiction? Is there an MOU, a direct contact above the hotline level, an agreed-upon protocol for removal during an active incident? If the answer is no, the next blackout will play out the same way.
The training point for dispatchers: if you receive a call about a stalled autonomous vehicle blocking emergency access, escalate to your supervisor immediately rather than attempting to resolve it through the standard hotline process. Time is a factor, and the standard process may not produce a result in time to matter.
The honest answer is that most centers will not prepare until after the first incident. But the San Francisco experience gives you a roadmap for what to build before you need it. At minimum: a call type or CAD code for autonomous vehicle incidents; a verified first responder contact above the public hotline level for any AV operator in your jurisdiction; a protocol for escalation when that contact is unreachable; and a conversation with your jurisdiction’s emergency management office about what geofencing or service suspension capabilities exist and how they are activated.
The harder conversation is the one about training. Waymo has trained 25,000+ first responders across the US on how to interact with its vehicles. If your jurisdiction is in an expansion market, you should be requesting that training proactively — not because it is your responsibility to learn how to manage their equipment, but because your responders will encounter these vehicles regardless of who is technically responsible.
The San Francisco model for what not to do: wait until a blackout creates 1,593 simultaneous stall events, then have the mayor text the CEO.
If AVs are already operating in your jurisdiction, this is a gap that exists now. If they are not yet operating, this is a planning item that belongs in your technology-impact section of your annual training review. The call type question is not trivial — it affects how calls are routed, how they are tracked, and whether your data ever surfaces a pattern of AV-related incidents that warrants a formal response from your jurisdiction.
Suggested owner: Operations supervisor in coordination with your CAD administrator and your jurisdiction’s emergency management office. This is not a line-level dispatcher decision.
Walk your team through this scenario without a script. If the answer involves more than one phone call and more than 60 seconds before a decision is made, you have identified a gap. The 53-minute hold is an extreme — but even a 10-minute hold during an active structure fire with a blocked access road is a critical failure.
The goal of this exercise is not to solve the problem in the room. It is to make the problem visible before an incident makes it visible for you. Have your dispatchers walk through what they would actually do, step by step. The friction points in that walkthrough are your training priorities.
- KQED. (2026, March 3). Is Waymo Ready for Another Emergency? San Francisco Supervisors Are Skeptical. kqed.org
- SF Standard. (2026, March 3). Why Waymo cars stalled during San Francisco’s December blackout. sfstandard.com
- SF Examiner. (2026, March 3). Waymo critics out in force at hearing on December disruption. sfexaminer.com
- KTVU Fox 2. (2026, January). Waymo faces scrutiny in San Francisco over past failures. ktvu.com
- Futurism. (2026). Waymos Are a Huge Drain on Public Resources, Government Data Shows. futurism.com
- Autoblog. (2025, October 18). Prankster Traps 50 Waymo Self-Driving Cars in Dead End. autoblog.com
- SFist. (2025, October 14). 50 Waymos Sent to Dead-End SF Street In Prankster’s ‘DDOS Attack’. sfist.com
- Newsweek. (2025, December 21). Waymo Driverless Cars Grind to Halt as San Francisco Blackout Causes Chaos. newsweek.com
- Waymo. (2025, December). Autonomously navigating the real world: lessons from the PG&E outage. waymo.com
- Waymo First Responder Resources. First responder hotline: 1-877-503-0840. Training requests: waymo-fro@google.com. waymo.com/firstresponders