What Is Zoom Bombing? Video Meeting Disruptions Explained

Zoom bombing — also written Zoombombing — is when uninvited individuals join a video conference and disrupt it by shouting slurs, sharing pornographic or violent imagery via screen share, playing loud audio, or spamming the chat. The term rose during the 2020 remote work and schooling surge when meeting links were widely shared, but the behavior applies to any platform — Google Meet, Microsoft Teams, Webex — not only Zoom. It is a harassment and security failure, not a product feature.

What It Is

Video meetings rely on join links, meeting IDs, and sometimes passwords. When hosts post links publicly — social media, open event pages, leaked email forwards — strangers can enter if waiting rooms, authentication, and host controls are disabled.

Typical disruption tactics:

• Screen share hijack — offensive visuals full-screen to all participants
• Audio spam — loud music or slurs through unmuted mic
• Chat flood — repetitive links or harassment text
• Rename trolling — impersonate teacher or CEO name in participant list
• Whiteboard vandalism — scribble on shared boards in collaborative tools

Motivations range from organized trolling communities sharing IDs in Discord channels to targeted harassment of schools and religious groups. Some jurisdictions treat severe cases as cybercrime under hacking or disorderly conduct statutes — legal outcomes vary.

Zoom bombing is not accidental wrong-number joins — it is intentional or reckless disruption at others' expense.

Why It Matters

Schools and universities moved classes online — students and minors exposed to graphic content in supposed safe classrooms triggered district policy overhauls and FBI warnings in the US.

Corporate confidentiality — bombers overhear unreleased product discussion if they enter all-hands meant to be internal.

Psychological harm — targeted communities (LGBTQ+ support groups, religious services) experience hate speech attacks live.

Platform trust — vendors tightened default security — waiting rooms, password requirements — after reputational damage from 2020 headlines.

Hosts bear duty of care for attendees — especially minors — by configuring meetings correctly and responding swiftly to eject intruders.

How It Works

Disruption requires join access:

1. Attacker obtains meeting URL + ID — scraped from public tweet, guessed sequential ID (less common now), or forwarded invite

2. Joins with anonymous or offensive display name

3. Exploits host settings allowing immediate screen share or unmuted entry

4. Causes chaos before host removes or ends meeting

Platforms added Waiting Room — host admits each guest individually — most effective basic control.

Prevention tips for hosts

• Never publish join links publicly — distribute via registration systems with unique links per attendee when possible
• Enable waiting room — admit known participants only
• Require meeting password — share separately from link
• Restrict screen sharing to host only — co-hosts if needed
• Disable "Join before host" for sensitive meetings
• Lock meeting once all expected attendees arrived
• Use authentication — Zoom signed-in users, Teams org-only, Google Meet restricted to school domain
• Assign co-hosts to help remove disruptors quickly
• Mute all on entry — unmute individuals as needed
• Report incidents to platform abuse teams and institution IT

For participants

Do not reshare meeting links in public channels. Report disruptive users via Remove and Report options. Leave and notify host if moderation lags.

After an incident

Document for IT/security review — was link leaked? settings wrong? Rotate recurring meeting IDs if compromised.

Common Examples

| Setting | Risk if misconfigured |

|---------|------------------------|

| Public webinar link on Twitter | High — open join |

| School class with waiting room + domain auth | Low |

| Personal birthday Zoom open link | Medium — prank joins |

| Corporate board meeting password + lock | Low if password private |

News stories often say "Zoom" generically while Teams or Meet suffered parallel incidents — problem is open conferencing hygiene, not one vendor exclusively.

Common Misconceptions

"Zoom bombing only happens on Zoom"

Platform-agnostic behavior — term stuck from early 2020 media focus on Zoom's popularity.

"Password alone stops everything"

Password shared alongside public link defeats purpose — combine with waiting room and link distribution discipline.

"Waiting room annoys guests so skip it"

Minor friction beats traumatic classroom disruption — default secure for education and all-hands.

"Kids zoom bombing are harmless pranks"

Exposure to illegal content, hate speech, and school disciplinary or legal consequences makes this serious — education and supervision matter.

"End-to-end encryption prevents bombing"

Encryption protects content from outsiders on the wire — does not stop authorized joiners who should not have been admitted.

The Takeaway

Zoom bombing is uninvited disruption of video meetings through join link exposure and weak host settings — harassment, not humor. Waiting rooms, restricted screen share, passwords, authenticated users, and private link distribution are essential prevention habits for hosts on any conferencing platform.

*This article is for general informational purposes only, does not provide guidance for disruptive behavior, and is not legal advice.*