Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Class action lawsuit Apple is accused of misleading customers about Hide My Email privacy while charging for it on Legal exposure over privacy representations for a paid iCloud+

Regulatory/Legal Action
First reported
Last updated
Happening score
H score 12
1 unique sources, 1 articles

Summary

Hide ▲

A class action lawsuit is targeting Apple over Hide My Email privacy claims, creating legal exposure tied to the paid iCloud+ feature. The complaint says Apple misled customers about the service's privacy protections while charging for it. The dispute is linked to a flaw that could expose users' real email addresses in mail logs.

Related Happenings

Apple Hide My Email privacy flaw fix

Security Patch Release
H score18 First: 21.07.2026 21:46 Last: 21.07.2026 21:46 Sources 1

How related: Apple has moved to address a security flaw in its Hide My Email service that enabled users' real email addresses to be unmasked, effectively undermining the feature's privacy guarantees.

About this happening: Apple deployed a fix for Hide My Email after a flaw could expose users' real email addresses in mail logs when messages were rejected as spam. The issue undermined the...

Open Happening

ICloud+ Hide My Email real email unmasking security flaw

Vulnerability
H score27 First: 21.07.2026 21:46 Last: 21.07.2026 21:46 Sources 1

How related: The crux of the problem was that simply sending a targeted Hide My Email user a message that got rejected as spam caused the person's real email address to appear in email logs.

About this happening: A Hide My Email flaw exposed real email addresses in email logs when spam-filtered messages were rejected, weakening the privacy protections for iCloud+ alias user...

Open Happening

Apple out-of-band iOS/iPadOS security updates (CVE-2026-28950)

Security Patch Release
H score28 First: 22.04.2026 23:58 Last: 22.04.2026 23:58 Sources 1

About this happening: Apple released out-of-band security updates for iPhone and iPad on April 22, 2026 to fix CVE-2026-28950. The patch addresses a Notification Services flaw t...

Latest development: 23.04.2026 11:50

Apple issued iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 on 2026-04-23 to close CVE-2026-28950, which could preserve deleted-message notifications on affected devices.

Open Happening

Apple Notification Services notification retention flaw (CVE-2026-28950)

Vulnerability
H score14 First: 22.04.2026 23:58 Last: 22.04.2026 23:58 Sources 1

About this happening: Apple released out-of-band updates for iPhone and iPad to fix CVE-2026-28950, a Notification Services flaw that could let deleted notifications remain stored o...

Latest development: 23.04.2026 11:50

Apple released iOS 26.4.2, iPadOS 26.4.2, iOS 18.7.8, and iPadOS 18.7.8 to address CVE-2026-28950, a logging flaw that could retain notifications marked for deletion on the device. The update improves data redaction so inadvertently preserved notifications are removed, and reporting also links the flaw to recovered Signal chats in the Prairieland case involving law enforcement and the FBI.

Open Happening

Apple account change notification phishing campaign

Campaign
H score30 First: 19.04.2026 19:03 Last: 19.04.2026 19:03 Sources 1

About this happening: A callback phishing campaign is abusing Apple account change notifications to deliver fake iPhone purchase scams through legitimate emails, making the lure look authen...

Open Happening

Timeline

  1. 21.07.2026 21:46 1 articles · 3h ago

    Hide My Email flaw is first reported to Apple

    Initial Disclosure

    A flaw in Apple Hide My Email was first reported to Apple on June 13, 2025 after it was found to let a user's real email address appear in mail logs when messages were rejected as spam, undermining the privacy guarantees of the paid iCloud+ feature.

    Show sources
    Open in new tab
  2. 21.07.2026 21:46 1 articles · 3h ago

    Apple deploys a fix for the Hide My Email email-log leak

    Mitigation Patch Update

    Apple deployed a fix on July 3, 2026 for the Hide My Email flaw that could unmask a user's real email address in mail logs when spam filters rejected a message, after earlier unsuccessful patch attempts in March 2026 and on June 30, 2026.

    Show sources
    Open in new tab
  3. 21.07.2026 21:46 2 articles · 3h ago

    Apple faces a class action lawsuit over Hide My Email privacy claims

    Legal Policy Action Update

    Apple is facing a class action lawsuit accusing it of misleading customers about Hide My Email privacy protections while charging for the paid iCloud+ feature, amid allegations that the company knew about the flaw for over a year and did not disable, pause, or warn users about it.

    Show sources
    Open in new tab