Zoom Communications controversies
Controversies tied to this brand in public sources. A listing is not a finding of fault.
Back to profile17 entries
2021
Zoom reached a proposed class-action settlement agreement
Settlement
Zoom reached an agreement in a class-action lawsuit concerning its handling of user data and reports of Zoombombings. The proposed settlement provides for an $85 million fund and proposed platform changes; it awaits approval by a judge.
Source excerpt
Well, Zoom reached an agreement in a class-action lawsuit over how it handled user data and reports of "Zoombombings."
According to documents detailing the proposed settlement filed in U.S. District Court in Northern California, Zoom will pay $85 million to go toward a fund for participants in the class-action suit.
In the suit, Zoom was accused of improperly sharing user data without permission through third-party integrations with companies including Facebook and Google.
2021
Zoom agrees to $85 million privacy lawsuit settlement
Settlement
Zoom agreed to pay $85 million and adopt security measures to settle a lawsuit alleging that it violated users’ privacy rights by sharing personal data with Facebook, Google and LinkedIn and allowing Zoombombing. The settlement requires court approval, and Zoom denied wrongdoing.
Company response
Denial — Zoom
The San Jose-based company denied wrongdoing in agreeing to settle.
Source excerpt
The San Jose-based company denied wrongdoing in agreeing to settle.
A preliminary settlement filed on Saturday afternoon requires approval by U.S. District Judge Lucy Koh in San Jose, California.
Zoom Video Communications Inc agreed to pay $85 million and bolster its security practices to settle a lawsuit claiming it violated users' privacy rights by sharing personal data with Facebook, Google and LinkedIn, and letting hackers disrupt Zoom meetings in a practice called Zoombombing.
2020
Privacy, encryption, and security controversy
Zoom faced criticism over security vulnerabilities, data-sharing practices, privacy policies, and claims about end-to-end encryption. The New York attorney general investigated the company, the Federal Trade Commission pursued a separate matter, and users filed a class-action lawsuit. Zoom agreed to additional security obligations and paid settlements in related civil matters. The rapid expansion of Zoom during the COVID-19 pandemic prompted criticism regarding privacy disclosures, security controls, encryption-related communications, data practices, and unwanted intrusions into meetings. The controversy led to heightened scrutiny from users, researchers, journalists, and public authorities. Zoom responded with security changes, product controls, policy updates, and greater emphasis on trust and safety.
2020
Tiananmen commemoration account closures
Zoom temporarily closed accounts connected with online events commemorating the 1989 Tiananmen protests and later acknowledged that Chinese government pressure had played a role. The decision prompted criticism concerning censorship, free expression, and the company's handling of conflicting national laws.
2020
U.S. criminal case involving a former executive
The U.S. Department of Justice charged former executive Xinjiang "Julien" Jin in a case concerning alleged efforts to disrupt meetings about the 1989 Tiananmen protests. Zoom acknowledged that it was the company involved, said Jin's employment had been terminated for policy violations, and stated that it was cooperating with prosecutors.
2020
Blocking of a San Francisco State University event
Zoom prevented a university-hosted event featuring Leila Khaled, citing U.S. terrorism-designation, export-control, and sanctions requirements. Organizers criticized the decision as censorship, while Zoom presented it as legal compliance.
2020
Zoom shareholder sues over alleged privacy disclosures
Lawsuit filed
A Zoom shareholder, Michael Drieu, filed suit in the U.S. District Court for the Northern District of California. The suit alleged that Zoom overstated its privacy standards and failed to disclose that its service lacked end-to-end encryption. The filing centered on the company's privacy claims and the absence of disclosure about the encryption status of its service.
Zoom shareholder Michael Drieu filed suit in the U.S. District Court for the Northern District of California, alleging that Zoom overstated its privacy standards and failed to disclose that its service lacked end-to-end encryption.
Company response
Apology — Zoom
Zoom首席执行官袁征（Eric Yuan）上周向用户道歉，称公司没有达到社区对隐私和安全方面的期望，正在采取措施修复问题。
Source excerpt
在线会议软件Zoom的一名股东于周二（4月7日）在美国加州北区地方法院提诉，指Zoom夸大隐私标准，更没有对外披露其服务未经端到端加密。
2020
Shareholder files class action lawsuit against Zoom
Lawsuit filed
A shareholder filed a class action lawsuit against Zoom Video Communications Inc., accusing the company of overstating its privacy standards and failing to disclose that its service was not end-to-end encrypted. The lawsuit centered on the company's privacy claims and the undisclosed nature of its encryption. The filing was reported on April 8, 2020, following an event dated April 7, 2020.
Zoom Video Communications Inc. was sued by a shareholder who accused the company of overstating its privacy standards and failing to disclose that its service was not end-to-end encrypted.
Stated objective. To concentrate on safety and privacy issues.
Company response
Remediation — Zoom
On the same day we learned of this incident, we identified the offender, took action to block their access to the platform and reported them to the relevant authorities.
Remediation — Zoom
On the same day we learned of this incident, we identified the offender, took action to block their access to the platform and reported them to relevant authorities
Apology — Zoom
Zoom CEO Eric Yuan did issue a pseudo-apology blog post.
Apology — Zoom
In a blog, the chief executive of the video conferencing app apologised for "falling short" on security issues and promised to address concerns.
Source excerpt
Zoom Video Communications Inc was slapped with a class action suit by one of its shareholders on Tuesday, accusing the video-conferencing app of overstating its privacy standards and failing to disclose that its service was not end-to-end encrypted.
Michael Drieu, a Zoom shareholder, has filed a class-action lawsuit against the video conferencing company claiming Zoom "had significantly overstated the degree to which its video communication software was encrypted."
In a complaint filed in the San Francisco federal court on Tuesday, the company and its top officers were accused of concealing the truth about shortcomings in the app's software encryption, including its alleged vulnerability to hackers, as well as the unauthorised disclosure of personal information to third parties including Facebook.
2020
Zoom commits to addressing privacy and security issues
Company response
Zoom announced that it would pause upcoming feature updates for 90 days and redirect resources toward identifying, addressing, and fixing issues concerning the privacy and security of its software. The commitment was framed as a temporary freeze on new features so that the company could concentrate on privacy and security concerns. The announcement did not specify particular issues, remedies, or outcomes beyond the stated focus on identifying, addressing, and fixing such concerns.
Zoom said it would freeze upcoming feature updates for 90 days and focus resources on identifying, addressing, and fixing issues concerning its software’s privacy and security.
Stated objective. To better identify, address, and fix issues proactively
Company response
Remediation — Zoom
Instead, the company will be focusing and shifting its resources towards solving all these security and privacy issues that have been popping up non-stop.
Source excerpt
So much so that according to a new blog post by Zoom’s CEO, Eric S. Yuan, the company will be implementing a 90-day freeze on all upcoming feature updates.
Over the next 90 days, we are committed to dedicating the resources needed to better identify, address, and fix issues proactively.
Zoom CEO Eric Yuan has apologized for the videoconferencing service's many privacy and security issues, saying it was originally built to service businesses with dedicated IT departments, not millions of consumers.
2020
Zoom updates iOS app to stop data sharing with Facebook
Company response
Zoom Communications released an update to its iOS app after an analysis reported that the app was sharing user information with Facebook. According to the report, the iOS app was sending user information to Facebook. In response, Zoom issued an app update intended to stop sending private data to Facebook. Zoom stated that it had removed Facebook's SDK from its iOS client. The event concerns the reported data sharing and Zoom's subsequent app update and removal of the Facebook SDK from its iOS client.
After an analysis reported that Zoom's iOS app was sharing user information with Facebook, Zoom issued an app update to stop sending private data to Facebook. Zoom said it removed Facebook's SDK from its iOS client.
Stated objective. Prevent the app from sending unnecessary device data to Facebook.
Company response
Remediation — Zoom
Zoom has now issued an update to its iOS app to stop sending confidential and private data to Facebook.
Remediation — Zoom
The company thus removed the Facebook SDK in iOS and reconfigured the feature that still allows users to use the login with Facebook via their browser.
Apology — Zoom
sincerely apologised for the concern this has caused
Remediation — Zoom
we decided to remove the Facebook SDK in our iOS client
Source excerpt
The problem, specific to Zoom's iOS app, involved sending device data to Facebook, even for users who didn't have a Facebook account.
Zoom users on iOS should now update their app to the latest version (4.6.9), which gets rid of the data-collecting Facebook SDK
A detailed analysis found that Zoom was connecting with Facebook's Graph API for data-sharing and was sending the device's model, OS, time zone, city, carrier, hardware details and its unique advertiser identifier to the analytics tool.
2020
Zoom responds to iOS data sharing concerns
Company response
Zoom addressed concerns after reports that its iOS app shared user and device data with Facebook. The company apologized for the concern and stated that it had removed the Facebook SDK from its iOS client. It also said it reconfigured Facebook login so that it works through a browser instead. The response followed the reporting on the app's data sharing with Facebook.
After reporting that Zoom's iOS app shared user and device data with Facebook, Zoom apologized for the concern and said it removed the Facebook SDK from its iOS client and reconfigured Facebook login to work through a browser.
Company response
Apology — Zoom
We sincerely apologize for the concern this has caused, and remain firmly committed to the protection of our users’ privacy.
Remediation — Zoom
Our customers' privacy is incredibly important to us, and therefore we decided to remove the Facebook SDK in our iOS client and have reconfigured the feature so that users will still be able to log in with Facebook via their browser.
Source excerpt
We sincerely apologize for the concern this has caused, and remain firmly committed to the protection of our users’ privacy.
After an investigation by Motherboard's Vice, video-conferencing app Zoom was found to be sharing user data with Facebook.
Our customers' privacy is incredibly important to us, and therefore we decided to remove the Facebook SDK in our iOS client and have reconfigured the feature so that users will still be able to log in with Facebook via their browser.
2020
Zoom responds to Bible study hacking incident
Company response
Zoom Communications addressed a hacking incident that affected a Bible study session. According to the company, it was deeply upset by the incident. Zoom stated that it identified and blocked the offender on the same day it learned of the event, and that it reported the offender to the relevant authorities. The company's response focused on these steps: expressing distress over what happened, acting against the offender on the day it was notified, and referring the matter to authorities.
Zoom said it was deeply upset by the incident, had identified and blocked the offender on the same day it learned of it, and reported the offender to relevant authorities.
Company response
Clarification — Zoom
"On the same day we learned of this incident, we identified the offender, took action to block their access to the platform and reported them to the relevant authorities," they added.
Source excerpt
"We were deeply upset to hear about this incident, and our hearts go out to those impacted by this horrific event. Words cannot express how strongly we condemn such behavior,' a Zoom spokesperson said in a statement.
"On the same day we learned of this incident, we identified the offender, took action to block their access to the platform and reported them to the relevant authorities," they added.
2020
Zoom reaches agreement with New York attorney general
Settlement
In May 2020, New York Attorney General Letitia James announced an agreement with Zoom. According to the announcement, the agreement covered issues including enhanced privacy for educational accounts and updates to Zoom's policy on abusive conduct. The announcement did not specify further terms, amounts, or outcomes beyond these points.
Stated objective. To protect users’ privacy.
Company response
Apology — Zoom
On a live YouTube stream on Wednesday, Zoom CEO Eric Yuan apologized to users for a string of security lapses that have rocked the app in recent weeks.
Investigation — Zoom
We’re looking into each and every one of them.
Source excerpt
Separately, New York’s attorney general, Letitia James, announced an agreement with Zoom over a range of issues, including enhanced privacy for educational accounts and updates to Zoom’s policy on abusive conduct.
Zoom has ramped up its security efforts, purchasing secure messaging startup Keybase and striking a deal with the New York attorney general’s office to protect users’ privacy.
Earlier this week, the company rolled out a series of changes intended to prevent “zoombombing” and other harassment on the service.
2020
Zoom apologizes and reinstates activists' accounts
Company response
Zoom Communications apologized after blocking the accounts of three users based outside mainland China amid pressure from the Chinese government. The company reinstated the accounts and stated that it would not let future Chinese government requests affect users outside mainland China. The incident, reported in June 2020, concerned accounts of activists based outside mainland China. Zoom's response included both an apology and a commitment regarding how it would handle similar government requests going forward.
Zoom apologized after blocking accounts of three users based outside mainland China amid pressure from the Chinese government, reinstated the accounts, and said it would not let future Chinese government requests affect users outside mainland China.
Company response
Apology — Zoom
Zoom has apologized for blocking accounts of U.S.-based Chinese activists as they were marking the Tiananmen Square anniversary.
Remediation — Zoom
It then apologized, reinstated the accounts and said it would never let requests from the Chinese government impact anyone outside mainland China again.
Source excerpt
Zoom has apologized for blocking accounts of U.S.-based Chinese activists as they were marking the Tiananmen Square anniversary.
It admitted that it blocked the accounts of three users based outside of mainland China after coming under pressure from the Chinese government.
It then apologized, reinstated the accounts and said it would never let requests from the Chinese government impact anyone outside mainland China again.
2020
Zoom agrees to FTC settlement over security and privacy claims
Settlement
Zoom agreed to a settlement with the U.S. Federal Trade Commission after the agency investigated and brought a case over Zoom's security and privacy representations, including its encryption claims and handling of meeting recordings. The settlement followed the FTC's investigation and case concerning those representations. The source report did not specify the settlement's terms, any payment amount, or further outcomes.
Company response
Remediation — Zoom
Zoom 需檢查軟體更新是否有漏洞、不得危及第三方軟體，並且必須老實公告其隱私及安全措施，包括用戶個資蒐集、使用及用戶權利等。
Source excerpt
此外，Zoom宣稱用戶視訊會議在一結束後就會加密儲存到雲端，但其實這些影像資料以未加密狀態儲存在Zoom伺服器內至少60天，才會移轉到加密雲端儲存。
FTC昨（9）日表示Zoom已同意導入一系列安全措施換取和解。
256-bit、全程加密等安全措施，遭到美國聯邦貿易委員會（federal trade committee，FTC）調查及起訴。
2020
Zoom reaches settlement with the FTC over security-practice allegations
Settlement
The FTC reached a settlement with Zoom after alleging that the company misled consumers about end-to-end encryption and failed to disclose a Safari browser plugin that automatically opened Zoom from meeting links. The settlement requires Zoom to adhere to security standards, including guaranteeing end-to-end encryption to all users and adding safeguards for stored user data.
Company response
Remediation — Zoom
As part of its settlement with the FTC, Zoom agreed to adhere to several security standards, including guaranteeing end-to-end encryption to all users and deploying more safeguards around how user data is stored.
Source excerpt
As part of its settlement with the FTC, Zoom agreed to adhere to several security standards, including guaranteeing end-to-end encryption to all users and deploying more safeguards around how user data is stored.
The Federal Trade Commission has reached a settlement with Zoom after it sued the company for "unfair and deceptive security practices," the FTC announced Monday.
The FTC subsequently sued Zoom, alleging in its complaint that Zoom misled consumers by claiming end-to-end encryption.
2020
Zoom announces data-region controls and China routing policy
Company response
Zoom announced that paid customers could opt in to or out of specific data-center regions for data in transit, and said free users outside China would not have their data transmitted through China. The measures were presented amid concerns about cross-border data routing.
Company response
Remediation — Zoom
Zoom近期针对上述三项质疑已采取了技术补救
Source excerpt
Zoom近期针对上述三项质疑已采取了技术补救
从4月18日开始，每个付费的Zoom客户都可以选择加入或退出特定的数据中心区域。
中国境外免费用户的数据将永远不会通过中国传送。