Apple Hide My Email Vulnerability Lets Attackers Reveal Users’ Real Email Addresses

Gbhackers •Divya • July 2, 2026

Apple’s Hide My Email privacy feature currently faces a significant flaw that may expose users’ real email addresses, compromising one of iCloud+’s core anonymity protections. According to 404 Media and independent tests, this issue has reportedly remained unaddressed for over a year since it was reported to Apple. Apple Hide My Email Vulnerability Hide My […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Apple's 'Hide My Email' Vulnerability Exposes User Email Addresses A significant vulnerability in Apple's 'Hide My Email' feature allows attackers to uncover users' real email addresses behind generated aliases. Discovered by Tyler Murphy of EasyOptOuts, the flaw was reported to Apple in June 2025 but remains unpatched as of July 2026. Independent testing confirmed that 100% of tested aliases were exploitable, raising serious privacy concerns for users relying on this feature. Apple acknowledged the issue and claimed to have addressed it in March 2026, but subsequent tests revealed that the vulnerability persists. Additionally, Apple plans to change the domain of these aliases from @icloud.com to @private.icloud.com, which may further hinder the feature's effectiveness. Users are advised to consider alternative privacy options while Apple investigates the issue. 41 sources 69

Extracted Entities

Apple Hide My Email Vulnerability Lets Attackers Reveal Users’ Real Email Addresses

The full story

Extracted Entities

Attack Types (1)

CWE Weaknesses (1)

Vulnerabilities (1)