Archive · 22 Jul 2026
Apple fixes Hide My Email flaw
Apple has a feature called Hide My Email that lets users create fake email addresses to keep their real ones private.
But there was a problem with this feature that could let bad people find out your real email address.
A man named Tyler Murphy told Apple about this problem over a year ago, but it wasn't fixed right away.
After a news website talked about it, Apple finally fixed the problem.
But some emails sent before the fix might still show your real email address.
Some people are even suing Apple because they say the company knew about the problem but didn't tell anyone.
Apple's Hide My Email feature had a flaw that could expose users' real email addresses.
The vulnerability was reported over a year ago but was only fixed after media attention.
The flaw could be exploited by sending an email that would be rejected as spam.
Email logs generated before the fix may still contain users' real email addresses.
Apple is facing a proposed class-action lawsuit alleging misrepresentation of privacy protections.
- Who
- Apple Inc., Tyler Murphy, 404 Media
- What
- A vulnerability in Apple's Hide My Email feature that could expose users' real email addresses.
- When
- The flaw was reported over a year ago and fixed in March 2026.
- Where
- Globally, affecting iCloud+ subscribers.
- Why
- The vulnerability allowed attackers to uncover users' real email addresses by exploiting a flaw in the Hide My Email feature.
Apple's Response
User Concerns
Patch Timeliness
Apple's Response
Apple eventually fixed the vulnerability after it was reported and highlighted by the media.
User Concerns
The flaw remained unpatched for over a year, raising concerns about Apple's responsiveness to security issues.
Privacy Protections
Apple's Response
Apple has patched the vulnerability, ensuring that the Hide My Email feature now works as intended.
User Concerns
Users' real email addresses may still be exposed in email logs generated before the fix, leaving some data at risk.
Legal Action
Apple's Response
Apple denies any wrongdoing and is defending against the lawsuit.
User Concerns
Plaintiffs allege that Apple misrepresented the privacy protections offered by Hide My Email, violating consumer protection laws.
- Feature
- Hide My Email
- Vulnerability Type
- Privacy Flaw
- Reported By
- Tyler Murphy, co-founder of EasyOptOuts
- Patch Date
- March 2026
- Affected Users
- iCloud+ Subscribers
- Legal Action
- Proposed Class-Action Lawsuit