People vs. Zoom: How COVID-19 Exposed a Security Vulnerability

When the COVID-19 crisis pushed the world’s offices, classrooms and family dinners onto video calls almost overnight, one app became the default: Zoom. And almost as quickly, the world got a masterclass in what happens when software scales faster than its security. The “People vs. Zoom” saga is now years behind us — lawsuits settled, flaws patched — but its lessons are more relevant than ever, because video conferencing never went away. Remote and hybrid work are permanent, and the privacy habits that would have protected you in 2020 are the same ones that protect you today.

What Actually Happened With Zoom

The problems piled up fast in spring 2020. Zoom’s iOS app was found to be sending analytics data to Facebook — even for users with no Facebook account — via a carelessly integrated SDK, the software development kit apps use to plug into third-party services. The data flow included device details, time zone, IP address, and a unique advertising identifier: everything an ad network, data broker or attacker could hope to collect, harvested without meaningful disclosure.

That was only the opener. “Zoombombing” — strangers crashing unprotected meetings — became a plague. The company’s marketing promised “end-to-end encryption” that its calls didn’t actually deliver at the time. Security researchers turned up flaw after flaw.

The consequences were real. A class-action lawsuit over the data-sharing and security claims ended with Zoom agreeing to an $85 million settlement, and the US Federal Trade Commission reached a settlement of its own requiring Zoom to build a comprehensive security programme. To its credit, the company then overhauled its security — real end-to-end encryption became an option, waiting rooms and passcodes became defaults. But none of the people whose data leaked got it back.

The Lesson: You Are Your Own Last Line of Defence

The deeper takeaway isn’t “Zoom bad.” It’s that any app can fail this way — through negligence rather than malice — and users who assumed the tool was safe paid the price. Those who had practiced cyber hygiene all along had far less to lose: less data exposed, an IP address hidden behind a VPN, no sprawling public profile to correlate the leaks against.

Video conferencing is now permanent infrastructure for work, school and healthcare. Treat every platform — Zoom, Teams, Meet, whatever comes next — with the same healthy scepticism:

• Share the minimum. Don't hand a conferencing app your full identity. Keep public profiles lean; a leak can only expose what exists.
• Lock down meetings. Use passcodes and waiting rooms, and don't post meeting links publicly.
• Update relentlessly. Most of Zoom's worst flaws were patched quickly — but only users who installed the patches benefited.
• Separate what matters. Keep truly sensitive files off cloud sync where practical, and use disposable email addresses for services that don't need your real one.

Always Use a VPN

There are multiple reasons why both companies and malicious groups want to get hold of your IP address — and the Zoom episode showed they sometimes don’t need to hack anything at all: the app simply handed it over. An IP address ties your sessions to your identity, your location and your other online activity.

A VPN breaks that link. With Le VPN running, every service you touch sees the VPN server’s IP address instead of yours, and all your traffic — video calls included — travels through an encrypted tunnel that neither your ISP nor anyone on your network can inspect. Working from home, from a café or from hotel Wi-Fi, the tunnel is the difference between broadcasting your metadata and keeping it. Le VPN’s modern protocols (WireGuard, Stealth WireGuard, OpenVPN, IPSec/IKEv2) carry video calls without perceptible lag, apps cover Windows, macOS, iOS and Android, and up to 5 simultaneous connections protect the laptop, phone and tablet you juggle through a workday. Servers in 100+ locations mean there’s always a fast one nearby.

Cyber Hygiene Is Key

Wash your hands — digitally. The comparison earned its cliché status honestly: small specks of exposed data stick to you, then touch something important, and voilà — you’re compromised. Keep your identity as private as the service allows, don’t leave phone numbers and full names scattered across platforms, and never keep your entire life story on your social media profiles. The Zoom affair proved that whatever information you’ve placed online can be taken wholesale — so the strongest protection is not having it out there in the first place.

Conclusion

Zoom’s lapse in judgment exposed gaps that were always there — in the software we trust and in our own habits. The crisis that made video calls universal has passed; the calls, and the risks, stayed. With a premium VPN concealing your connection data and consistent cyber hygiene keeping your digital fingerprints to a minimum, the next “People vs.” headline doesn’t have to include you. Start with the easy step: get Le VPN, backed by a 30-day money-back guarantee on your first purchase, and keep your calls — and everything else — to yourself.