AI Governance
Data Centers
Drones
Climate
Privacy
2026 Maine Senate
Bob Dylan
Last Update: 10/27/2026 at 6:00 AM EST
Apple iCloud+ Privacy Flaws
Coverage from The Tech Buzz, Tech Times, and others
Apple’s iCloud+ includes Hide My Email, which forwards messages through aliases, and iCloud Private Relay, designed to help obscure IP addresses and browsing activity.
Researchers and reporting have described ways Hide My Email aliases could be linked to users’ real addresses, and possible IP exposure in some Private Relay browsing and passkey scenarios. The issues have prompted scrutiny of how Apple investigates and fixes vulnerabilities, and lawsuits alleging that the services did not provide protections as represented. Together, these cases illustrate the technical and consumer-trust questions involved when privacy features promise to limit identifying information.
Looking Back
149 Day Timeline
Mar 29
Apr 22
May 16
Jun 12
Jul 6
Jul 30
Aug 23
All Articles11 articles
Important
Federal agents sought Apple customer email records as Apple transparency reporting showed over 13,000 government demands in 2025 first-half.
3/29/2026 • Data Collection & Surveillance Practices • General
Apple announced on August 24 that Hide My Email aliases will remain on icloud.com, preserving shared-domain protection for users and complicating broad blocking by websites.
8/25/2026 • Personal Data & Identity • General
Apple patched a Hide My Email vulnerability on July 3 after a report described attacker methods that could reveal underlying sender email addresses.
7/22/2026 • Personal Data & Identity • General
Anthony Alvarez filed a proposed class action in federal court in the USA alleging Apple Hide My Email vulnerability exposed real email addresses and patches were not released promptly.
7/17/2026 • Regulation, Law & Enforcement • General
Alvarez v. Apple Inc. filed in California alleges iCloud Hide My Email vulnerability enables exposure of real email addresses and seeks class action remedies.
7/16/2026 • Data Breaches & Exposure Events • General
Tyler Murphy reported persistent vulnerabilities in Apple Hide My Email in May 2026, raising concerns that aliasing fails against identity lookup services.
7/1/2026 • Cybersecurity Tech (Privacy-Relevant) • General
EasyOptOuts and Tyler Murphy reported an Apple Hide My Email vulnerability that may expose primary email addresses after recovery tests in 2025 and ongoing investigation.
7/1/2026 • Privacy Technology & AI • General
Talal Hak Bakry and Tommy Mysk publicly disclosed that Apple iCloud Private Relay can expose users' IP addresses through WebKit connections on Apple devices.
8/5/2026 • Privacy Technology & AI • General
Edward Rickman sued Apple in the United States on August 6 after researchers reported that iCloud Private Relay can expose subscribers' IP addresses.
8/12/2026 • Regulation, Law & Enforcement • General
Interesting
Apple appeared to fix an iCloud Private Relay IP-address vulnerability in August software updates after researchers Talal Haj Bakry and Tommy Mysk identified exposure affecting Safari users.
8/25/2026 • Cybersecurity (Privacy-Relevant) • General
Tyler Murphy and 404 Media reported a June 2025 Hide My Email flaw that may identify original Apple accounts and remained unfixed by July.
7/2/2026 • Privacy Technology & AI • General