Lumberton Township Public Schools

Summary

A New Jersey school district halted Zoom usage after a malicious hacker disrupted a middle school virtual lesson, exposing students and staff to racist language and pornographic images during a brief 15-second intrusion. The teacher and co-host promptly terminated the unauthorized participant, prompting the district to suspend the platform pending a security review. This incident occurred amid widespread adoption of video conferencing for remote education, reflecting broader cybersecurity challenges as similar "Zoom-bombing" attacks targeting online classrooms surged nationally. The district emphasized student safety as its priority while evaluating the platform's suitability for educational use.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

On April 27, 2020, a malicious hacker disrupted a virtual middle school class conducted via Zoom for Lumberton Township Public Schools in Burlington County, New Jersey. During the 15-second intrusion, the attacker exposed students, their teacher, and a co-host to racist language and pornographic imagery. The teacher and co-host promptly terminated the hacker’s access to the session upon detecting the disruption. The school district administration was immediately notified of the security breach. This incident occurred amid widespread school closures across the United States due to COVID-19, which had forced rapid adoption of remote learning platforms like Zoom. Superintendent Joe Langowski confirmed the district suspended Zoom usage temporarily while investigating whether the platform could be secured for educational purposes. No technical details about the attacker’s entry method or compromised accounts were disclosed in public statements.

The disruption reflected broader security challenges with Zoom’s surging popularity during pandemic-related remote work and education. Prior to this incident, the FBI’s Boston Division had issued a national alert on March 30, 2020, warning of increased "Zoom-bombing" attacks targeting virtual meetings with hate speech, pornography, and threats. The alert referenced a separate Massachusetts incident where an intruder shouted profanities and disclosed a teacher’s home address during a virtual class. Lumberton’s decision to halt Zoom use aligned with growing institutional concerns about the platform’s security controls, though no further breaches were reported in the district following the suspension. The district emphasized student safety as the primary factor in its operational change, with Langowski stating the administration had prioritized developing a "superior educational experience" before the breach necessitated platform reevaluation.

Sources

Sources available to members: 1 source.