US authorities accuse Zoom of deceiving users over data protection

U.S. Federal Trade Commission (FTC) accused the Zoom platform of "misconduct that undermined user security". The service claimed to use end-to-end encryption, but in fact provided a lower level of protection for calls.

The FTC noted that Zoom stored cryptographic keys that could provide access to the content of its customers’ meetings.

The platform also misled users who stored call recordings in the company’s cloud service. Zoom claimed that data were encrypted immediately after the call ended. However, some of them reportedly remained unencrypted for up to 60 days on Zoom’s servers and were only then moved to secure cloud storage, according to the FTC.

The commission found a violation in the covert installation of ZoomOpener software, which automatically connected a user to a meeting, "circumventing Safari’s protection that guards against common malware".

According to the FTC, Zoom’s misleading statements gave users a false sense of security. That was particularly true for those who used the platform to discuss personal topics, such as health and financial information.

"In numerous messages, Zoom specifically advertised its encryption level as the reason customers used the service," the statement said.

In response to the accusations, Zoom pledged to develop and implement a comprehensive security program.

Earlier this summer, the platform said it planned to provide the FBI with access to users who violate the law. It proposed protecting data from third-party access through encryption for paid accounts.

Subscribe to ForkLog news on Telegram: ForkLog Feed — the full feed of news, ForkLog — the most important news and polls.