In "zoom bombing" (teleconference hijacking) what specific law is being broken? Youtube's reporting feature asks to cite the specific laws are being broken? The class I witnessed being zoom bombed was in the US (California). The streamer who did it lives in Canada (British Columbia).
The law prohibits accessing a computer without authorization, or in excess of authorization.
As I understand the notion of "Zoom Bombing", none. There is no authorization required, all you need is the URL. In principle, CFAA could be applicable, but for that law to be applicable, you need to go beyond violating the TOS (e.g. "No profanity"), you have to illegally obtain a password or circumvent password protection.