Apple 'Hide My Email' Vulnerability Reveals Peoples' Real Email Addresses

Researchers have disclosed a vulnerability in Apple's 'Hide My Email' service that allows attackers to uncover the real email addresses of iCloud+ users. The issue was reported to Apple over a year ago but remains unpatched, prompting a public disclosure to warn users.
Why it matters
This vulnerability undermines a core privacy feature for millions of users, highlighting potential risks in relying on intermediary email services for anonymity.
The popular iCloud+ service has problems. It's possible for an attacker to discover the email address you're trying to hide.
The report presents the technical findings and the timeline of communication with Apple objectively.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in