Published • loading... • Updated
Apple’s Hide My Email Feature Has an Unfixed Bug that Leaves Email Addresses Exposed
Researchers say the flaw affects every tested alias and could expose users to spam, breaches and identification through linked people-search databases.
- A vulnerability in Apple's Hide My Email feature allows attackers to reveal users' real email addresses, with EasyOptOuts cofounder Tyler Murphy reporting that 100% of tested addresses were exploitable.
- Murphy reported the issue to Apple in June 2025 with replication instructions, yet the vulnerability remained unpatched for over a year despite the company acknowledging the report.
- Although Apple claimed to have addressed the flaw in March 2026, Murphy verified the vulnerability persisted; 404 Media independently confirmed the exploit this week while withholding technical details.
- Users relying on the iCloud+ feature for safety remain exposed, as free, publicly accessible people-search sites can easily link discovered email addresses to other personal details.
- Apple recently announced plans to move Hide My Email addresses to a dedicated 'private.icloud.com' domain, allowing services to block aliases, though this does not address the underlying security vulnerability.
Insights by Ground AI
Podcasts & Opinions
34 Articles
34 Articles
Hiding My Email is one of Apple's pillars to ensure the privacy of users. This security mechanism that should protect users online is now under scrutiny. What it is...
·Portugal
Read Full Article
4th of July SaleGet 40% off Vantage subscriptions for yourself or a friend.Get Started
Coverage Details
Total News Sources34
Leaning Left6Leaning Right1Center7Last UpdatedBias Distribution50% Center
Bias Distribution
- 50% of the sources are Center
50% Center
L 43%
C 50%
Factuality
To view factuality data please Upgrade to Premium
