Apple's 'Hide My Email' Vulnerability Reveals Users' Addresses

WHO:

Lifehacker - Apple is the organization involved in the reported vulnerability.

Mashable - Cybersecurity researchers are the individuals who unveiled the vulnerability.

WHAT:

TechRadar - "100% of Hide My Email addresses were exploitable," according to a security researcher.

404 Media - The vulnerability can still be exploited as of the date of their verification.

404 Media - A security researcher stated that Apple has failed to fix the vulnerability for more than a year.

404 Media - 404 Media verified the issue with one of their own hidden email addresses.

CNET - A vulnerability in Apple's privacy-focused iCloud Plus feature allows attackers to discover users' real email addresses.

Engadget - A vulnerability can reportedly connect real email addresses to anonymous ones.

TechCrunch - A researcher claims that the bug in Apple's Hide My Email feature could render the feature effectively useless.

Lifehacker - The 'Hide My Email' feature reportedly exposes users' real email addresses.

Mashable - The vulnerability has been leaking private email addresses for more than a year.

Techmeme - A researcher stated that the vulnerability allows anyone to discover a real email address.

WHEN:

Techmeme - The vulnerability was first reported in June 2025.

Lifehacker - Apple has known about the issue for over a year.

WHY:

Techmeme - The researcher indicated that "Hide My Email users deserve to know that it may be possible for attackers to discover their hidden email addresses."

HOW:

Techmeme - The method by which the vulnerability operates allows for the discovery of hidden email addresses.

(UPDATED July 2, 2026 15:43 UTC)

A security researcher has revealed that all Hide My Email addresses were found to be exploitable. This vulnerability remains a concern, as it can still be exploited according to a recent verification. TechRadar and 404 Media both reported on this alarming issue today.

--

(UPDATED July 2, 2026 08:03 UTC)

A security researcher has reported that Apple has not addressed a significant vulnerability for over a year. This issue was confirmed by 404 Media, which verified it using one of their own hidden email addresses. The ongoing concern highlights the need for timely security updates from major tech companies.

--

(UPDATED July 2, 2026 04:21 UTC)

A new vulnerability has been discovered in Apple's privacy-focused iCloud Plus feature, which allows attackers to uncover users' real email addresses. This issue was reported by CNET and raises concerns about the effectiveness of privacy protections in the service. Apple has yet to respond to this security flaw, leaving users anxious about their personal information.

--

(UPDATED July 1, 2026 23:23 UTC)

A new vulnerability has been discovered that can reportedly link real email addresses to anonymous ones. This issue raises significant concerns about privacy and security in digital communications. Experts are urging users to be cautious and take steps to protect their personal information.

--

(UPDATED July 1, 2026 21:24 UTC)

A researcher has raised concerns that a bug in Apple's Hide My Email feature could make it effectively useless. This revelation was reported by TechCrunch earlier today. Users may want to stay tuned for updates as Apple addresses this issue.

--

(UPDATED July 1, 2026 17:38 UTC)

Cybersecurity researchers have uncovered a vulnerability in Apple's 'Hide My Email' feature, which reportedly exposes users' real email addresses. This issue has been leaking private email addresses for over a year, and a researcher emphasized that users deserve to be aware that their hidden email addresses may be discoverable by attackers. The vulnerability was first reported in June 2025, and Apple has been aware of the problem for more than a year.