What happened

San Diego-based company WebinarTV Inc. accrued a directory claiming to host over 200,000 webinar recordings. Security researchers and journalists discovered that many of these entries were actually secret screen recordings of Zoom calls, ranging from non-profit medical support groups to corporate discussions.

WebinarTV acquired access either by deploying automated bots to sign up via public "click-to-RSVP" links or by harvesting meeting links through third-party browser extensions. Once inside, the software silently screen-recorded the meetings without triggering Zoom’s built-in recording notification banner. 

The audio and transcripts were then processed through AI tools to auto-generate podcast episodes narrated by synthetic AI voice hosts, which were published on WebinarTV's public platform.

Why it happened

The incident was driven by aggressive web scraping and content aggregation strategies aimed at accumulating vast libraries of indexable media to capture search engine traffic and monetise advertising. The problem was enabled by:

• Over-privileged browser extensions: Tools that passively monitor user calendars and browser sessions to extract Zoom URLs and credentials.

• Screen-recording loopholes: Bypassing Zoom’s native host recording notifications by using client-side screen captures.

• Lack of transparency: WebinarTV operated without clear disclosures regarding how user data and meeting links were ingested or transformed into derivative commercial products.