Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Apple has addressed a security flaw in its Hide My Email service that allowed users' real email addresses to be exposed in mail logs when messages were rejected as spam. The vulnerability was reported to Apple on June 13, 2025, and was finally patched on July 3, 2026, after multiple failed attempts. The issue undermined the privacy guarantees of the feature, potentially exposing real email addresses for users who created Hide My Email aliases before July 7, 2026, and has led to a class action lawsuit alleging misleading privacy claims.

AI-extracted · verify before operational use