# Apple's Hide My Email flaw remained exploitable weeks after claimed fix Privacy feature still vulnerable two weeks after supposed patch. - **Source:** [AppleInsider News](https://brifing.si/source/4f063a0c-06a9-46c3-84ea-633b4d4b1a4f) - **Published:** 2026-07-21 - **Original article:** - **On Brifing:** https://brifing.si/s/c34008f9-ef9b-45e8-a0e9-6f9de97009ce ## Apple's claim vs reality Apple stated it fixed a security flaw in Hide My Email service on July 3, 2026. However, independent tests confirmed the vulnerability remained exploitable two weeks after the alleged fix. This raises questions about the effectiveness of the company's security patches. ## Technical details of the flaw Senders with specific Hide My Email aliases could reveal the actual email address behind it without requiring advanced technical knowledge. This poses significant privacy risks, especially for users handling sensitive communications. ## Independent verification AppleInsider team reproduced the vulnerability on July 17, confirming the flaw was still active. Test results suggest either incomplete patching or uncovered usage scenarios in Apple's fix. ## User risks The vulnerability creates substantial risks for users employing masked emails for sensitive communications. It threatens the protection of business emails, financial information, and personal data. ## Apple's response The company told 404 Media the issue was resolved on July 3 and the vulnerability completely fixed. However, independent tests contradict this claim. Whether Apple will provide further clarification remains uncertain. ## Security warning This incident raises questions about trust in digital privacy tools. Users should implement additional safeguards when handling sensitive information through services like Hide My Email, and companies should seek independent verification of security claims. ## Sources covering this story - https://appleinsider.com/articles/26/07/21/hide-my-email-flaw-still-worked-two-weeks-after-apples-claimed-fix?utm_source=rss — --- _Summary written by Brifing from the original reporting. Copyright in the original article belongs to its publisher; read the full piece at the link above._