Apple’s ‘Hide My Email’ Bug Exposes Real Addresses
2026-07-02
Privacy, it seems, is breaking where Apple sells it hardest. Hide My Email, a marquee iCloud feature designed to mask inboxes behind random relay aliases, has been reported by a security researcher to sometimes expose a user’s actual address to third‑party services.
At stake is more than a cosmetic glitch; it challenges Apple’s pitch that email relay and mail transfer agent controls can cleanly separate a user’s identity from the services they sign up for. According to the research, under certain conditions the system appears to pass through the underlying mailbox instead of the generated alias, effectively short‑circuiting the privacy layer that sits between sender and recipient.
That allegation cuts directly against Apple’s branding of Hide My Email as a protective buffer for sign‑ups, newsletters and app accounts. If the relay logic can be bypassed or misrouted, advertisers and data brokers gain a direct identifier again, restoring the very link the feature was supposed to sever. Apple has been asked to clarify the scope of the bug, whether it is reproducible across devices and regions, and if a server‑side fix or software update is in motion.
Loading...
