Zoom (product): Difference between revisions
added 1 more incident and moved it to the top |
Added archive URLs for 6 citation(s) using CRWCitationBot |
||
| Line 32: | Line 32: | ||
===Data Breach=== | ===Data Breach=== | ||
On April 2020, over 500,000 consumer's accounts were intercepted due to credential stuffing--a method involving using credentials from previous data breaches to test them on accounts-- that resulted in customers email addresses, passwords, meeting URLs, and Hostkeys being intercepted and sold to the dark web. In response, Zoom issued an 90 day plan to address privacy and security issues. <ref>{{Cite web |last=Burgess |first=Monica |date=2025-10-31 |title=Zoom Data Breach |url=https://www.huntress.com/threat-library/data-breach/zoom-data-breach |url-status=live |access-date=2026-02-23 |website=Huntress}}</ref> | On April 2020, over 500,000 consumer's accounts were intercepted due to credential stuffing--a method involving using credentials from previous data breaches to test them on accounts-- that resulted in customers email addresses, passwords, meeting URLs, and Hostkeys being intercepted and sold to the dark web. In response, Zoom issued an 90 day plan to address privacy and security issues. <ref>{{Cite web |last=Burgess |first=Monica |date=2025-10-31 |title=Zoom Data Breach |url=https://www.huntress.com/threat-library/data-breach/zoom-data-breach |url-status=live |access-date=2026-02-23 |website=Huntress |archive-url=http://web.archive.org/web/20251211090037/https://www.huntress.com/threat-library/data-breach/zoom-data-breach |archive-date=11 Dec 2025}}</ref> | ||
===Forced Arbitration and Voice Data Collection=== | ===Forced Arbitration and Voice Data Collection=== | ||
[[File:Zoom force arbitration agreement.png|alt=Article in the EULA that shows forced arbitration|thumb|Forced Arbitration Agreement]] | [[File:Zoom force arbitration agreement.png|alt=Article in the EULA that shows forced arbitration|thumb|Forced Arbitration Agreement]] | ||
{{Main|Zoom changed Terms of Service for Data Collection and Force Arbitration}} | {{Main|Zoom changed Terms of Service for Data Collection and Force Arbitration}} | ||
On April 1, 2023, Zoom sent an email to all users that they have updated their terms of service, forcing users into forced arbitration, taking effect one day prior on May 31. <ref>{{Cite web |last=McFarland |first=Jen |date=8 Aug 2023 |title=Zoom's AI Update: Incredibly Intrusive Changes & What It Means for Small Businesses |url=https://www.womenconquerbiz.com/zooms-ai-update/ |url-status=live |access-date=24 Feb 2026 |website=Women Conquer Business}}</ref> The user is able to send an opt-out request in a period of 30 days since April 2023 or since the day the account was created. <ref>{{Cite web |date=2025-06-17 |title=Zoom's Terms of Service update notifications |url=https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0057985 |url-status=live |access-date=2026-02-23 |website=Zoom}}</ref><blockquote>27.11 Opt-Out. You may reject this Arbitration Agreement and opt out of arbitration by '''sending an email to [email protected]''' within (i) thirty (30) calendar days of April 1, 2023 if you are an existing user, or (ii) thirty (30) calendar days of the date you created your account if you are a new user. Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals. '''Your notice to opt-out must include your first and last name, address, the email address associated with your Zoom account, and an unequivocal statement that you decline this Arbitration Agreement.''' If you do decide to opt out, that opt out will apply to this Arbitration Agreement and all previous versions thereof, and neither party will have the right to compel the other to arbitrate any Dispute. However, all other parts of this Arbitration Agreement will continue to apply to you, and opting out of this Arbitration Agreement has no effect on any other arbitration agreements that you may enter into in the future with us.<ref>{{Cite web |date=2023-04-01 |title=Opt out of the arbitration agreement in Zoom’s Terms of Service now |url=https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |url-status=live |access-date=2026-02-23 |website=Frederick's Timelog}}</ref></blockquote> | On April 1, 2023, Zoom sent an email to all users that they have updated their terms of service, forcing users into forced arbitration, taking effect one day prior on May 31. <ref>{{Cite web |last=McFarland |first=Jen |date=8 Aug 2023 |title=Zoom's AI Update: Incredibly Intrusive Changes & What It Means for Small Businesses |url=https://www.womenconquerbiz.com/zooms-ai-update/ |url-status=live |access-date=24 Feb 2026 |website=Women Conquer Business |archive-url=http://web.archive.org/web/20250915061219/https://www.womenconquerbiz.com/zooms-ai-update/ |archive-date=15 Sep 2025}}</ref> The user is able to send an opt-out request in a period of 30 days since April 2023 or since the day the account was created. <ref>{{Cite web |date=2025-06-17 |title=Zoom's Terms of Service update notifications |url=https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0057985 |url-status=live |access-date=2026-02-23 |website=Zoom |archive-url=http://web.archive.org/web/20260101075914/https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0057985 |archive-date=1 Jan 2026}}</ref><blockquote>27.11 Opt-Out. You may reject this Arbitration Agreement and opt out of arbitration by '''sending an email to [email protected]''' within (i) thirty (30) calendar days of April 1, 2023 if you are an existing user, or (ii) thirty (30) calendar days of the date you created your account if you are a new user. Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals. '''Your notice to opt-out must include your first and last name, address, the email address associated with your Zoom account, and an unequivocal statement that you decline this Arbitration Agreement.''' If you do decide to opt out, that opt out will apply to this Arbitration Agreement and all previous versions thereof, and neither party will have the right to compel the other to arbitrate any Dispute. However, all other parts of this Arbitration Agreement will continue to apply to you, and opting out of this Arbitration Agreement has no effect on any other arbitration agreements that you may enter into in the future with us.<ref>{{Cite web |date=2023-04-01 |title=Opt out of the arbitration agreement in Zoom’s Terms of Service now |url=https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |url-status=live |access-date=2026-02-23 |website=Frederick's Timelog |archive-url=https://web.archive.org/web/20260224115833/https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |archive-date=24 Feb 2026}}</ref></blockquote> | ||
[[File:Zoom-TOS-update-prompt.png|thumb|Term Of Service Prompt ]] | [[File:Zoom-TOS-update-prompt.png|thumb|Term Of Service Prompt ]] | ||
Later on, Zoom changes their agreement to allow National Arbitration & Mediation (NAM) to decide for cases, and requiring users to send opt-out request on their behalf.<blockquote>Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals.<ref>{{Cite web |date=2023-04-11 |title=ZOOM TERMS OF SERVICE |url=https://www.zoom.com/en/trust/terms/ |url-status=live |access-date=2026-02-23 |website=Zoom}}</ref></blockquote> | Later on, Zoom changes their agreement to allow National Arbitration & Mediation (NAM) to decide for cases, and requiring users to send opt-out request on their behalf.<blockquote>Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals.<ref>{{Cite web |date=2023-04-11 |title=ZOOM TERMS OF SERVICE |url=https://www.zoom.com/en/trust/terms/ |url-status=live |access-date=2026-02-23 |website=Zoom |archive-url=http://web.archive.org/web/20260128110243/https://www.zoom.com/en/trust/terms/ |archive-date=28 Jan 2026}}</ref></blockquote> | ||
<ref>{{Cite web |last=Hashim |first=Smita |date=2023-08-07 |title=How Zoom’s terms of service and practices apply to AI features |url=https://web.archive.org/web/20231221131911/https://www.zoom.com/en/blog/zooms-term-service-ai/ |url-status=live |access-date=2026-02-23 |website=Zoom Blog}}</ref> <ref>{{Cite web |author= Cyber Management Alliance |date=12 Aug 2023 |title=Zoom's New Privacy Terms & What They Mean For You |url=https://www.cm-alliance.com/cybersecurity-blog/zooms-new-privacy-terms-what-they-mean-for-you |url-status=live |access-date=24 Feb 2026 |website=Cyber Management Alliance}}</ref> | <ref>{{Cite web |last=Hashim |first=Smita |date=2023-08-07 |title=How Zoom’s terms of service and practices apply to AI features |url=https://web.archive.org/web/20231221131911/https://www.zoom.com/en/blog/zooms-term-service-ai/ |url-status=live |access-date=2026-02-23 |website=Zoom Blog}}</ref> <ref>{{Cite web |author= Cyber Management Alliance |date=12 Aug 2023 |title=Zoom's New Privacy Terms & What They Mean For You |url=https://www.cm-alliance.com/cybersecurity-blog/zooms-new-privacy-terms-what-they-mean-for-you |url-status=live |access-date=24 Feb 2026 |website=Cyber Management Alliance |archive-url=http://web.archive.org/web/20251017042712/https://www.cm-alliance.com/cybersecurity-blog/zooms-new-privacy-terms-what-they-mean-for-you |archive-date=17 Oct 2025}}</ref> | ||
===Zoombombing incident=== | ===Zoombombing incident=== | ||
Revision as of 12:00, 24 February 2026
| Basic Information | |
|---|---|
| Release Year | 2011 |
| Product Type | Server, Laptop |
| In Production | Yes |
| Official Website | https://www.zoom.com/ |
Developed by Zoom Communications, Zoom workplace or commonly referred as Zoom, is a video calling platform allowing that can be downloaded on devices and be used for free, but with certain limitations. It is a software commonly used in enterprise and educational workplaces.
Consumer-impact summary
User Freedom
The user must accept the terms of service and Forced arbitration in order to use the product.
User Privacy
Security vulnerabilities and privacy concerns have raised due to the amount of data the software collects from its users. [citation needed] In August 2023, Zoom modified their terms of service, mentioning they will be able to process and use data from the calls to train AI or for other purposes. [1]
Business Model
The free version of the software allows users to do calls that can have up to 100 participants, with a max time of 40 minutes. The product contains subscriptions with various types of plans, with the rooms plan allowing up to 1,000 participants with a maximum time of 30 hours.
Market Control
Incidents
This is a list of all consumer-protection incidents related to this product. Any incidents not mentioned here can be found in the Zoom (product) category.
Deal with Google and Facebook
Short summary of the incident (could be the same as the summary preceding the article).
Data Breach
On April 2020, over 500,000 consumer's accounts were intercepted due to credential stuffing--a method involving using credentials from previous data breaches to test them on accounts-- that resulted in customers email addresses, passwords, meeting URLs, and Hostkeys being intercepted and sold to the dark web. In response, Zoom issued an 90 day plan to address privacy and security issues. [2]
Forced Arbitration and Voice Data Collection
On April 1, 2023, Zoom sent an email to all users that they have updated their terms of service, forcing users into forced arbitration, taking effect one day prior on May 31. [3] The user is able to send an opt-out request in a period of 30 days since April 2023 or since the day the account was created. [4]
27.11 Opt-Out. You may reject this Arbitration Agreement and opt out of arbitration by sending an email to [email protected] within (i) thirty (30) calendar days of April 1, 2023 if you are an existing user, or (ii) thirty (30) calendar days of the date you created your account if you are a new user. Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals. Your notice to opt-out must include your first and last name, address, the email address associated with your Zoom account, and an unequivocal statement that you decline this Arbitration Agreement. If you do decide to opt out, that opt out will apply to this Arbitration Agreement and all previous versions thereof, and neither party will have the right to compel the other to arbitrate any Dispute. However, all other parts of this Arbitration Agreement will continue to apply to you, and opting out of this Arbitration Agreement has no effect on any other arbitration agreements that you may enter into in the future with us.[5]
Later on, Zoom changes their agreement to allow National Arbitration & Mediation (NAM) to decide for cases, and requiring users to send opt-out request on their behalf.
Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals.[6]
Zoombombing incident
See also
References
- ↑ Isaksen-Loxton, Duncan (7 Aug 2023). "The Privacy Implications of Zoom's New Terms of Service Are Scary". SixFive. Archived from the original on 2026-02-24. Retrieved 24 Feb 2026.
- ↑ Burgess, Monica (2025-10-31). "Zoom Data Breach". Huntress. Archived from the original on 11 Dec 2025. Retrieved 2026-02-23.
- ↑ McFarland, Jen (8 Aug 2023). "Zoom's AI Update: Incredibly Intrusive Changes & What It Means for Small Businesses". Women Conquer Business. Archived from the original on 15 Sep 2025. Retrieved 24 Feb 2026.
- ↑ "Zoom's Terms of Service update notifications". Zoom. 2025-06-17. Archived from the original on 1 Jan 2026. Retrieved 2026-02-23.
- ↑ "Opt out of the arbitration agreement in Zoom's Terms of Service now". Frederick's Timelog. 2023-04-01. Archived from the original on 24 Feb 2026. Retrieved 2026-02-23.
- ↑ "ZOOM TERMS OF SERVICE". Zoom. 2023-04-11. Archived from the original on 28 Jan 2026. Retrieved 2026-02-23.
- ↑ Hashim, Smita (2023-08-07). "How Zoom's terms of service and practices apply to AI features". Zoom Blog. Retrieved 2026-02-23.
{{cite web}}: CS1 maint: url-status (link) - ↑ Cyber Management Alliance (12 Aug 2023). "Zoom's New Privacy Terms & What They Mean For You". Cyber Management Alliance. Archived from the original on 17 Oct 2025. Retrieved 24 Feb 2026.