SquidthePlummer (talk | contribs)
added 1 more incident and moved it to the top
SquidthePlummer (talk | contribs)
condensed Forced Arbitration and Voice Data Collection incident, added 2 more incidents
 
(One intermediate revision by one other user not shown)
Line 27: Line 27:


===Deal with Google and Facebook===
===Deal with Google and Facebook===
Short summary of the incident (could be the same as the summary preceding the article).
On November 9, 2020, the Federal Trade Commission filed a complaint against zoom for misleading claims about their end-to-end encryption and giving users data -- regardless of free or paid accounts-- to Google and Facebook. Zoom agreed to an $85 million settlement<ref>{{Cite web |last=Whelan |first=Lisa |date=2021-08-12 |title=Why you should care about Zoom’s $85m privacy lawsuit |url=https://proton.me/blog/zoom-85-million-settlement |url-status=live |access-date=2026-02-24 |website=Proton}}</ref> on January 19,2021,  that resulted in $15 or $25 towards every user and improving its security and privacy disclosure practices. <ref>{{Cite web |last=B |first=Urian |date=2021-08-04 |title=Zoom Lied about 'End-to-End encryption' and Gave User Data to Facebook and Google Without Consent {{!}} $85 Million Settlement |url=https://www.techtimes.com/articles/263721/20210804/zoom-lied-about-end-to-end-encryption-and-gave-user-data-to-facebook-and-google-without-consent-85-million-settlement.htm |url-status=live |access-date=2026-02-24 |website=TechTimes}}</ref><ref>{{Cite web |last=Brodkin |first=Jon |date=2021-08-02 |title=Zoom to pay $85M for lying about encryption and sending data to Facebook and Google |url=https://arstechnica.com/tech-policy/2021/08/zoom-to-pay-85m-for-lying-about-encryption-and-sending-data-to-facebook-and-google/ |url-status=live |access-date=2026-02-24 |website=Arstechnica}}</ref>
 


===Data Breach===
===Data Breach===


On April 2020, over 500,000 consumer's accounts were intercepted due to credential stuffing--a method involving using credentials from previous data breaches to test them on accounts-- that resulted in customers email addresses, passwords, meeting URLs, and Hostkeys being intercepted and sold to the dark web. In response, Zoom issued an 90 day plan to address privacy and security issues. <ref>{{Cite web |last=Burgess |first=Monica |date=2025-10-31 |title=Zoom Data Breach |url=https://www.huntress.com/threat-library/data-breach/zoom-data-breach |url-status=live |access-date=2026-02-23 |website=Huntress}}</ref>
On April 2020, over 500,000 consumer's accounts were intercepted due to credential stuffing--a method involving using credentials from previous data breaches to test them on accounts-- that resulted in customers email addresses, passwords, meeting URLs, and Hostkeys being intercepted and sold to the dark web. In response, Zoom issued an 90 day plan to address privacy and security issues. <ref>{{Cite web |last=Burgess |first=Monica |date=2025-10-31 |title=Zoom Data Breach |url=https://www.huntress.com/threat-library/data-breach/zoom-data-breach |url-status=live |access-date=2026-02-23 |website=Huntress |archive-url=http://web.archive.org/web/20251211090037/https://www.huntress.com/threat-library/data-breach/zoom-data-breach |archive-date=11 Dec 2025}}</ref>


===Forced Arbitration and Voice Data Collection===
===Forced Arbitration and Voice Data Collection===
[[File:Zoom force arbitration agreement.png|alt=Article in the EULA that shows forced arbitration|thumb|Forced Arbitration Agreement]]
{{Main|Zoom changed Terms of Service for Data Collection and Force Arbitration}}
{{Main|Zoom changed Terms of Service for Data Collection and Force Arbitration}}
On April 1, 2023, Zoom sent an email to all users that they have updated their terms of service, forcing users into forced arbitration, taking effect one day prior on May 31. <ref>{{Cite web |last=McFarland |first=Jen |date=8 Aug 2023 |title=Zoom's AI Update: Incredibly Intrusive Changes & What It Means for Small Businesses |url=https://www.womenconquerbiz.com/zooms-ai-update/ |url-status=live |access-date=24 Feb 2026 |website=Women Conquer Business}}</ref> The user is able to send an opt-out request in a period of 30 days since April 2023 or since the day the account was created. <ref>{{Cite web |date=2025-06-17 |title=Zoom's Terms of Service update notifications |url=https://support.zoom.com/hc/en/article?id=zm_kb&sysparm_article=KB0057985 |url-status=live |access-date=2026-02-23 |website=Zoom}}</ref><blockquote>27.11 Opt-Out. You may reject this Arbitration Agreement and opt out of arbitration by '''sending an email to [email protected]''' within (i) thirty (30) calendar days of April 1, 2023 if you are an existing user, or (ii) thirty (30) calendar days of the date you created your account if you are a new user. Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals. '''Your notice to opt-out must include your first and last name, address, the email address associated with your Zoom account, and an unequivocal statement that you decline this Arbitration Agreement.''' If you do decide to opt out, that opt out will apply to this Arbitration Agreement and all previous versions thereof, and neither party will have the right to compel the other to arbitrate any Dispute. However, all other parts of this Arbitration Agreement will continue to apply to you, and opting out of this Arbitration Agreement has no effect on any other arbitration agreements that you may enter into in the future with us.<ref>{{Cite web |date=2023-04-01 |title=Opt out of the arbitration agreement in Zoom’s Terms of Service now |url=https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |url-status=live |access-date=2026-02-23 |website=Frederick's Timelog}}</ref></blockquote>
On May 31, 2023, Zoom updated their terms of service, requiring users to go into force arbitration and data collection for artificial intelligence purposes, giving users a 30 day period since April 1, 2023 or account creation date. The company received a wave of backlash after fears of a lack of possibility to opt-out artificial intelligence training collection, Zoom changed their terms a few days later that requires consent to data-collection.<ref>{{Cite web |last=McFarland |first=Jen |date=8 Aug 2023 |title=Zoom's AI Update: Incredibly Intrusive Changes & What It Means for Small Businesses |url=https://www.womenconquerbiz.com/zooms-ai-update/ |url-status=live |archive-url=http://web.archive.org/web/20250915061219/https://www.womenconquerbiz.com/zooms-ai-update/ |archive-date=15 Sep 2025 |access-date=24 Feb 2026 |website=Women Conquer Business}}</ref><ref>{{Cite web |date=2023-04-01 |title=Opt out of the arbitration agreement in Zoom’s Terms of Service now |url=https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |url-status=live |archive-url=https://web.archive.org/web/20260224115833/https://www.frederickding.com/posts/2023/04/opt-out-of-the-arbitration-agreement-in-zooms-terms-of-service-now-0111418/ |archive-date=24 Feb 2026 |access-date=2026-02-23 |website=Frederick's Timelog}}</ref>
[[File:Zoom-TOS-update-prompt.png|thumb|Term Of Service Prompt ]]
Later on, Zoom changes their agreement to allow National Arbitration & Mediation (NAM) to decide for cases, and requiring users to send opt-out request on their behalf.<blockquote>Your opt-out notice must be individualized and must be sent from the email address associated with your individual Zoom account. An opt-out notice that purports to opt out multiple parties will be invalid as to all such parties. No individual (or their agent or representative) may effectuate an opt out on behalf of other individuals.<ref>{{Cite web |date=2023-04-11 |title=ZOOM TERMS OF SERVICE |url=https://www.zoom.com/en/trust/terms/ |url-status=live |access-date=2026-02-23 |website=Zoom}}</ref></blockquote>
 
<ref>{{Cite web |last=Hashim |first=Smita |date=2023-08-07 |title=How Zoom’s terms of service and practices apply to AI features |url=https://web.archive.org/web/20231221131911/https://www.zoom.com/en/blog/zooms-term-service-ai/ |url-status=live |access-date=2026-02-23 |website=Zoom Blog}}</ref> <ref>{{Cite web |author= Cyber Management Alliance |date=12 Aug 2023 |title=Zoom's New Privacy Terms & What They Mean For You |url=https://www.cm-alliance.com/cybersecurity-blog/zooms-new-privacy-terms-what-they-mean-for-you |url-status=live |access-date=24 Feb 2026 |website=Cyber Management Alliance}}</ref>
 
===Zoombombing incident===
 
[[wikipedia:Zoombombing|<br />Zoombombing]]
 


==See also==
==See also==