Apple Sued Over Alleged Hide My Email Privacy Flaw

Apple is facing a proposed class action lawsuit alleging that its Hide My Email feature exposed users’ real email addresses to websites and apps despite being marketed as a privacy protection. The complaint says the flaw allowed aliases generated through iCloud+ to be linked back to a user’s actual address, potentially defeating the purpose of the service and raising claims under California false advertising and consumer protection laws.

According to the filings, a security researcher reported the issue to Apple in June 2025, Apple acknowledged it the following month, later said in March that it had addressed the problem, and then indicated in May that a patch would be released within weeks, but the lawsuit alleges the vulnerability remained unresolved. The suit seeks compensation for iCloud+ subscribers and other users who paid for privacy protections that allegedly did not work as advertised, while reports say there are no known cases of active exploitation and technical reproduction details have not been publicly disclosed.