AI Generated Image
Apple Fixes Hide My Email Vulnerability After 404 Media Coverage
404 Media • • general
Key Points:
- Apple has fixed a vulnerability in its Hide My Email feature that allowed anyone to discover users' real email addresses, a flaw known to Apple for over a year but only patched after media exposure in July 2026.
- The flaw, discovered by Tyler Murphy in June 2025, involved the ability to reveal the real email behind generated anonymous addresses when a message to the Hide My Email address was rejected as spam.
- Despite the patch deployed on July 3, 2026, security experts warn that hidden email addresses created before July 7, 2026, may still be exposed in third-party mail transfer logs due to bounced emails.
- A class action lawsuit has been filed against Apple seeking reimbursement for iCloud+ subscription costs and an injunction over alleged deceptive practices related to the vulnerability.
- Apple’s Hide My Email is part of the paid iCloud+ service that generates anonymous email addresses to protect user privacy, but this incident has raised concerns about the feature's security and transparency.
