CSIDB logo
Incident

Rochester City School District

Incident posture

Attack window
Aug 2020
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2025-10-29 00:00

Linked entities

Victim
Rochester City School District
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Aug 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A virtual parent forum hosted by the Rochester City School District was disrupted by unauthorized participants who infiltrated the Zoom meeting, displaying racist comments and offensive symbols. The intrusion forced the superintendent to abruptly terminate the event, which involved over 100 families discussing the upcoming academic year. This incident highlighted security vulnerabilities in the district's virtual learning setup, exposing attendees to harmful content during a public engagement session.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On August 14, 2020, the Rochester City School District (RCSD) experienced a disruptive intrusion during its first virtual parent forum discussing the 2020-2021 school year reopening plans. The event, conducted via Zoom, attracted over 100 participating families before unauthorized individuals breached the meeting. During the forum, attackers displayed racist comments and offensive symbols on shared screens, deliberately disrupting the session. Superintendent Dr. Lesli Myers-Small identified the intrusion in real time and terminated the meeting to prevent further exposure of participants to harmful content. The incident occurred despite widespread public awareness of "zoom-bombing" risks as educational institutions increasingly relied on virtual platforms during pandemic-era reopenings.

The attack directly undermined RCSD’s community engagement efforts during a critical planning phase, forcing abrupt cancellation of the forum. While no specific technical vulnerabilities were disclosed, the district’s Zoom configuration failed to prevent unauthorized access despite prior publicized incidents affecting other organizations. The intrusion highlighted persistent security challenges facing school systems adopting remote communication tools, with disruptive consequences for operational transparency and stakeholder trust. Immediate containment relied solely on meeting termination, with no subsequent technical remediation details provided in public reports. Media coverage contextualized the event within a broader pattern of contemporaneous zoom-bombing incidents targeting educational and governmental entities nationwide.

Sources

Sources available to members: 1 source.

CSIDB