HACKER Q&A
📣 joshstrange

Zoom hacked/forced Zoom password reset?


Was Zoom hacked? I use randomly generated passwords for every site that are unique but Zoom logged me out this morning and then told me I need to reset my password because:

> Your username and password have been compromised on 3rd-party site or app. To secure your Zoom account, update your password.

Picture: https://cs.joshstrange.com/eBPRd4

I know for a fact I never used that password elsewhere, did this happen to anyone else? And/or is the message they show just bad/wrong?


  👤 LinuxBender Accepted Answer ✓
Perhaps it could it be related to their 2020 incidents? [1] If you have a corporate account then your security/legal team should be able to ask them for more details as they would have signed an NDA. For personal accounts I think the best one could do is open a ticket and hope for a non boiler plate answer.

[1] - https://teampassword.com/blog/what-happened-with-the-zoom-cr...


👤 cameron_b
Are you in an enterprise account or a stand-alone? I have a few contacts, but haven't heard anything or been advised on password-based security measures.

I know for certain that they are ratcheting up their restrictions, so there may be some sort of false flag ( or false messaging, we see that too ) correlated to implementing a security control.


👤 techlaw
This has happened to us twice in the past week and a half.

All of our passwords are randomly generated with entropy greater than 150 bits.

Have seen several others reporting this as well.