# Apple Fixes Hide My Email Security Flaw Privacy issue resolved for iCloud+ users. - **Source:** [Macworld](https://brifing.si/source/5c5245ce-d063-40e0-bd54-48b60cbc761f) - **Published:** 2026-07-22 - **Original article:** - **On Brifing:** https://brifing.si/s/a025b241-ab71-492f-903a-c78a2a16aea6 ## Vulnerability Discovery Tyler Murphy from EasyOptOuts discovered a security flaw in Hide My Email feature in June 2025. The vulnerability exposed primary email addresses in spam email logs. Murphy reported findings to Apple, but the issue remained unresolved for a year. ## Media's Role 404 Media brought the issue to light in July 2026, prompting Apple to act. The company released a patch days after the report. Initially, media didn't disclose exploit details to prevent misuse while the vulnerability was active. ## Technical Details The flaw revealed real email addresses in bounce-back logs when emails were rejected. Though low-tech, this seriously compromised user privacy. The issue stemmed from improper email header handling in the anonymization process. ## Affected Users All Hide My Email addresses created before July 7, 2026 were potentially exposed. Murphy warned these addresses might remain in third-party logs. Users' privacy expectations were violated during this period. ## Legal Action While awaiting the fix, iCloud+ users filed a class-action lawsuit against Apple. Plaintiffs claim they paid for a feature that didn't deliver promised privacy protections, seeking compensation for damages incurred. ## Privacy Imperative This incident underscores the critical importance of privacy features in digital services. Protecting user data must be companies' top priority. While Apple's eventual response was swift, the initial delay raised concerns about accountability. ## Sources covering this story - https://www.macworld.com/article/3196195/apples-hide-my-email-is-once-again-hiding-your-email.html — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._