Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

ICloud+ Hide My Email real email unmasking security flaw

Vulnerability
First reported
Last updated
Happening score
H score 27
1 unique sources, 1 articles

Summary

Hide ▲

A Hide My Email flaw exposed real email addresses in email logs when spam-filtered messages were rejected, weakening the privacy protections for iCloud+ alias users. The issue was disclosed on June 13, 2025 and fixed on July 3, 2026 after earlier patch attempts failed. The leak could occur even when a message never reached the inbox, because spam rejection alone could trigger the exposure. Addresses created before July 7, 2026 may have been captured in mail transfer logs.

Related Happenings

Class action lawsuit Apple is accused of misleading customers about Hide My Email privacy while charging for it on Legal exposure over privacy representations for a paid iCloud+

Regulatory/Legal Action
H score12 First: 21.07.2026 21:46 Last: 21.07.2026 21:46 Sources 1

How related: The development comes as Apple is facing a class action lawsuit, accusing it of misleading customers about the privacy of its Hide My Email feature while charging for it.

About this happening: A class action lawsuit is targeting Apple over Hide My Email privacy claims, creating legal exposure tied to the paid iCloud+ feature. The complaint says Apple mis...

Open Happening

Apple account change notification phishing campaign

Campaign
H score30 First: 19.04.2026 19:03 Last: 19.04.2026 19:03 Sources 1

About this happening: A callback phishing campaign is abusing Apple account change notifications to deliver fake iPhone purchase scams through legitimate emails, making the lure look authen...

Open Happening

Timeline

  1. 21.07.2026 21:46 1 articles · 3h ago

    Tyler Murphy reports Hide My Email flaw to Apple

    Initial Disclosure

    Tyler Murphy, co-founder of EasyOptOuts, reported to Apple on June 13, 2025 that a Hide My Email flaw could expose a user's real email address in email logs when a targeted message was rejected as spam.

    Show sources
    Open in new tab
  2. 21.07.2026 21:46 2 articles · 3h ago

    Apple deploys fix for Hide My Email address leak

    Mitigation Patch Update

    Apple deployed a fix for the Hide My Email flaw on July 3, 2026 after earlier patch attempts in March 2026 and on June 30, 2026 failed, closing a bug that could unmask real email addresses in mail logs.

    Show sources
    Open in new tab