CSIDB logo
Incident

Oklahoma State Board of Education

Incident posture

Attack window
Aug 2020
Location
United States of America
Status
Historical
CIA posture
Available to members
Updated
2025-10-29 00:00

Linked entities

Victim
Oklahoma State Board of Education
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Aug 2020
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A virtual parent forum hosted by the Rochester City School District was disrupted by unauthorized individuals who infiltrated the Zoom meeting, resulting in the display of racist comments and offensive symbols. The incident prompted the superintendent to terminate the session abruptly, impacting over 100 participating families. This breach highlighted ongoing security vulnerabilities in virtual learning platforms, particularly inadequate safeguards against disruptive intrusions during public educational events.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

1 technique

Description

On August 14, 2020, the Rochester City School District (RCSD) in New York experienced a disruptive intrusion during its first virtual parent forum discussing the 2020-2021 school year reopening plans. The district conducted the event via Zoom, with over 100 families participating. During the meeting, unauthorized individuals gained access and displayed racist comments and offensive symbols on participants' screens. The intrusion caused significant disruption to the forum, which aimed to address educational plans amid the COVID-19 pandemic. Superintendent Dr. Lesli Myers-Small identified the malicious content in real time and terminated the session to prevent further exposure. The incident occurred despite widespread public awareness of "Zoom-bombing" risks as schools increasingly relied on virtual platforms for operations. No technical details about the attackers' entry method or specific content displayed were disclosed in available reports. The disruption prevented the district from completing its scheduled community engagement activity.

The immediate response involved session termination, but no follow-up technical mitigation steps or forensic findings were publicly detailed by RCSD officials. The incident highlighted ongoing vulnerabilities in educational institutions' rapid adoption of video conferencing tools during pandemic-era operations. While no data breach or system compromise was reported, the attack undermined stakeholder trust during critical reopening discussions. District leadership did not announce whether rescheduled forums would implement additional security measures. This event reflected broader patterns of disruptive intrusions affecting educational entities, with the article noting multiple similar Zoom-bombing incidents occurring contemporaneously across other organizations. The disruption temporarily halted community dialogue about academic planning without causing reported financial losses or long-term technical consequences beyond the canceled session.

Sources

Sources available to members: 1 source.

CSIDB