Origin
#ZoomBombing emerged in March-April 2020 during COVID-19 pandemic lockdowns when video conferencing platform Zoom became ubiquitous for remote work, school, and social gatherings. The phenomenon involved uninvited participants crashing Zoom meetings to share offensive content, harass attendees, or disrupt proceedings.
The Phenomenon
Typical Zoombombing tactics:
- Sharing pornography/graphic content via screen share
- Shouting racist/hateful slurs
- Drawing obscene images on shared whiteboard
- Playing loud music/disturbing audio
- Hijacking presenter controls
Early Incidents (March-April 2020)
Schools:
- Virtual classrooms disrupted by strangers
- Pornographic content shown to students
- Teachers losing control of meetings
Religious services:
- Passover Seders interrupted (April 2020)
- Church services vandalized with hate speech
- Antisemitic harassment during Jewish gatherings
Government/business:
- City council meetings hijacked
- Corporate board meetings infiltrated
- Sensitive discussions compromised
How It Happened
Security vulnerabilities:
- Default settings allowed anyone to join with meeting ID
- Meeting IDs were sequential/guessable
- No waiting rooms enabled by default
- Screen share not restricted to hosts
- Weak password protection
Coordination:
- Discord servers organizing raids
- Reddit threads sharing meeting IDs
- Twitter hashtags promoting targets
- 4chan/8chan planning attacks
FBI Warning (March 30, 2020)
FBI Boston Division issued alert:
“The FBI has received multiple reports of conferences being disrupted by pornographic and/or hate images and threatening language.”
Classified Zoombombing as potential federal offense under computer intrusion laws.
Zoom’s Response
Security updates (March-April 2020):
- Waiting rooms enabled by default
- Passwords required for meetings
- Screen sharing restricted to hosts
- “Report User” button added
- Encryption improvements
- Meeting ID randomization
90-Day Security Plan (April 1, 2020):
- CEO Eric Yuan apologized
- Froze feature development
- Focused exclusively on security/privacy
- Daily transparency reports
Legal Consequences
Criminal charges filed:
- California: Teen charged with hate crime for Zoombombing school meeting
- Texas: Man arrested for disrupting online AA meeting
- Multiple jurisdictions: Computer fraud charges
Potential charges:
- Computer intrusion (18 USC § 1030)
- Harassment/cyberstalking
- Hate crimes (if targeting protected groups)
- Child endangerment (schools)
Cultural Impact
Zoom fatigue + security anxiety:
- Users paranoid about uninvited guests
- Hosts over-policing legitimate attendees
- Increased friction in virtual spaces
- Privacy concerns about meeting recordings
Memes & satire:
- “Can you see my screen?” jokes
- “You’re on mute” culture
- Zoom background chaos
- Meeting etiquette debates
Educational Response
Schools implemented:
- Staff-only meeting IDs (not shared publicly)
- Waiting rooms for student verification
- Limited screen share/chat permissions
- Teacher training on security settings
- Alternative platforms (Google Meet, Microsoft Teams)
Long-Term Changes
Platform evolution:
- End-to-end encryption (E2EE) implemented May 2021
- Advanced security controls
- AI-powered harassment detection
- Meeting access controls granularity
User behavior:
- Security-first mindset normalized
- Waiting rooms standard practice
- Password protection default
- Meeting ID sharing discretion
Related Phenomena
Zoom culture moments (2020):
- Lawyer cat filter mishap (“I’m not a cat”)
- “Potato” filter stuck (Lizet Ocampo)
- Accidental toilet cameos
- Background scandals (CNN Jeffrey Toobin)
Privacy Concerns
Beyond bombing:
- Zoom sending data to Facebook (addressed)
- “Attention tracking” feature (removed)
- China server routing (changed)
- Encryption claims (clarified)
Pandemic Legacy
Zoombombing became symbol of:
- Rapid tech adoption outpacing security
- Malicious actors exploiting pandemic vulnerabilities
- Digital public space challenges
- Need for privacy literacy
The term “Zoombombing” entered dictionaries (Merriam-Webster) in 2020.
Sources: