Apple's Hide My Email flaw remained exploitable weeks after claimed fix
Privacy feature still vulnerable two weeks after supposed patch.
1Apple's claim vs reality
Apple stated it fixed a security flaw in Hide My Email service on July 3, 2026. However, independent tests confirmed the vulnerability remained exploitable two weeks after the alleged fix. This raises questions about the effectiveness of the company's security patches.
2Technical details of the flaw
Senders with specific Hide My Email aliases could reveal the actual email address behind it without requiring advanced technical knowledge. This poses significant privacy risks, especially for users handling sensitive communications.
3Independent verification
AppleInsider team reproduced the vulnerability on July 17, confirming the flaw was still active. Test results suggest either incomplete patching or uncovered usage scenarios in Apple's fix.
4User risks
The vulnerability creates substantial risks for users employing masked emails for sensitive communications. It threatens the protection of business emails, financial information, and personal data.
5Apple's response
The company told 404 Media the issue was resolved on July 3 and the vulnerability completely fixed. However, independent tests contradict this claim. Whether Apple will provide further clarification remains uncertain.
6Security warning
This incident raises questions about trust in digital privacy tools. Users should implement additional safeguards when handling sensitive information through services like Hide My Email, and companies should seek independent verification of security claims.