Last Update: 09/22/2026 at 11:34 PM EST

Apple Hide My Email Flaw Exposes Addresses

Coverage from CNET, PCMag, and others

Apple Hide My Email Flaw Exposes Addresses topic image

Apple’s iCloud+ Hide My Email feature was reported to contain a vulnerability that could let websites, senders, or other parties associate masked email aliases with users’ real addresses.

Apple says it deployed a fix in July 2026, but researchers and lawsuit filings describe earlier fixes as incomplete and warn that previously exposed addresses may remain in third-party logs. The disclosure has also prompted proposed class-action litigation alleging that Apple marketed a privacy feature that did not reliably protect users’ identities.

Looking Back
22 Day Timeline
Jul 1Jul 5Jul 9Jul 13Jul 17Jul 21
History
07/23/2026

The main update is a reframing of the flaw as still potentially exposing identities through third-party email-processing data, even after Apple’s July 2026 patch. The current version also tightens the litigation framing and drops earlier claims about broad exploit testing and the planned alias-domain migration as central elements.

07/23/2026

The biggest change is that Apple now says it shipped a patch on July 3, 2026, turning the story from disputed vulnerability reports into a confirmed remediation timeline. The legal and reputational stakes also sharpened as new proposed class actions framed the issue as misleading privacy marketing.

All Articles6 articles
Additional6 articles · CI Score below 45
CNET / Tyler Lacoma
7/1/2026 • Cybersecurity Tech (Privacy-Relevant) • General
PCMag / James Peckham
7/22/2026 • Personal Data & Identity • General
Yahoo
7/17/2026 • Regulation, Law & Enforcement • General
CNET / Tyler Lacoma
7/16/2026 • Data Breaches & Exposure Events • General
Android Authority / Taylor Kerns
7/1/2026 • Privacy Technology & AI • General
Hothardware / Chris Harper
7/2/2026 • Privacy Technology & AI • General