Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses.

Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses.

      Here’s how the flaw in Apple's Hide My Email resulted in the leaking of real addresses for over a year, and why it was only rectified after the issue became public knowledge.

      It appears that the "Hide" aspect of Hide My Email was not functioning as effectively as promised, a topic I discussed earlier in July. Security researcher Tyler Murphy identified the flaw in June 2025, but even though Apple asserted it was fixed by March 2026, independent evaluations revealed it was still vulnerable, at least until July 3, 2026.

      So, how did this issue manifest?

      The flaw allowed anyone sending an email to your concealed address—regardless of it being spam or a legitimate message—to inadvertently expose your true email address in the sender’s mail logs.

      You wouldn’t even realize it had occurred, as bounced messages don’t arrive in your inbox for you to notice. Murphy initially brought the issue to Apple’s attention in June 2025. Apple claimed the problem was resolved in March 2026, but that wasn’t accurate. Fast forward to early July, and 404 Media broke the story.

      Apple implemented a genuine fix just two days later, on July 3. You can draw your own conclusions based on that timeline. "The bug that caused Apple’s Hide My Email to leak hidden email addresses to senders has been resolved," reported 404 Media.

      Is the problem completely fixed?

      However, the outlet cautions that email addresses associated with Hide My Email aliases, particularly those created before July 7, 2026, may still exist in retained third-party mail logs. Furthermore, Apple is currently facing a class-action lawsuit alleging the company violated California consumer protection laws by marketing a feature that did not function as advertised.

      This behavior, of quietly acknowledging a problem internally while claiming to reporters that it has been resolved when it hasn’t, mirrors criticisms about Apple’s App Store moderation only responding to public outcry.

      Privacy features promoted as premium aspects face increased scrutiny, and the pending class action means Apple’s management of the situation could be as significant as the fix itself.

Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses. Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses.

Other articles

Apple has addressed a bug in the Hide My Email feature that revealed the actual email addresses of users. Apple has addressed a bug in the Hide My Email feature that revealed the actual email addresses of users. A bug in Hide My Email revealed actual addresses through bounced spam messages for more than a year before Apple fixed it, mere days after it became publicly known. Samsung's offer of doubling free storage for preorders has ended in Austria, and the new promotion isn't as appealing. Samsung's offer of doubling free storage for preorders has ended in Austria, and the new promotion isn't as appealing. Samsung's traditional pre-order benefit of offering double storage at no extra cost has been removed for Austria, now substituted with discounted upgrades for the Galaxy Z Fold 8 and Z Flip 8. BlackRock secures $12 billion for Meta's data center in El Paso. BlackRock secures $12 billion for Meta's data center in El Paso. BlackRock is spearheading a $12 billion debt issuance to construct Meta's data center in El Paso, holding 80% of the stake and ensuring that the majority of the expenses are not reflected on Meta's balance sheet. Samsung's promotion of doubling storage for preorders has ended in Austria, and the new offer is not as appealing. Samsung's promotion of doubling storage for preorders has ended in Austria, and the new offer is not as appealing. Samsung has eliminated its traditional pre-order benefit of double storage at no extra cost for Austria, substituting it with discounted upgrade options for the Galaxy Z Fold 8 and Z Flip 8. Big Tech's investment in AI is aligning with its cash flow. Big Tech's investment in AI is aligning with its cash flow. The combined capital expenditures on AI by the largest cloud companies are expected to surpass the revenue generated by their primary operations, with free cash flow being the first to show the impact. Origin Energy is looking into a possible violation of customer data. Origin Energy is looking into a possible violation of customer data. Australia's biggest energy retailer reported to the ASX that it is looking into unauthorized access to customer data, although it seems that card and bank information has not been compromised.

Apple has resolved an issue with the Hide My Email feature that revealed users' actual email addresses.

A vulnerability in Hide My Email revealed actual addresses through returned spam messages for more than a year before Apple fixed it, just days after it became public knowledge.