Apple finally patches Hide My Email security flaw a year after it was first discovered

Date:
Wed, 22 Jul 2026 15:05:00 +0000

Description:
A bug that was first discovered in June 2025 was finally fixed in early July 2026.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Apple fixes Hide My Email flaw which exposed anonymous addresses through bounced spam logs Hidden emails created before July 7, 2026 may still be exposed in thirdparty logs Users should update and consider regenerating hidden addresses to reduce lingering exposure risk A year after first being discovered, a vulnerability in Apple s Hide My Email feature has finally been fixed - however some users will probably remain at risk until they make changes on their end, as well.

The Hide My Email feature is part of the paid iCloud + offering and allows users to quickly create a new, anonymous email address - very handy for
people who dont want to share their email with different products across the web. It is also important since some companies tend to sell this information to third parties who then, unsolicited, start sending spam emails and various offers. In June 2025, security researcher Tyler Murphy found a way to link these anonymous emails to the real addresses, making the entire service useless. He disclosed his findings to Apple, who responded with a fix. However, the issue remained, and Murphy went back-and-forth with Apple, until finally deciding to go public. Latest Videos From Watch full video here: Was it finally patched? Now, he says the issue had finally been resolved, but there are caveats:

We don't know how often hidden email addresses were leaked in email logs. For many major email hosts, the leak was triggered simply by an email being automatically rejected as spam, even if it was a legitimate message. Such emails probably didn't make it to your inbox, so you cant review your spam folder to learn whether you were affected, he said. You may like Apples security feature can be duped into supplying the real contact info Apple has fixed a security flaw in Beats Studio Buds which let hackers spy on conversations Free email accounts contributing to nearly half of all commercial spam

Even though the bug is now fixed, he thinks the risk to Hide My Email users remains. Because non-malicious emails could bounce, revealing your hidden email address, and because mail transfer logs are often retained, we'd assume that any hidden email address linked to a Hide My Email address created
before July 7, 2026, may have been exposed and could still be in third-party logs.

Apple released a working fix on July 3 2026, with users urged to update immediately. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners
or sponsors By submitting your information you agree to the Terms &
Conditions and Privacy Policy and are aged 16 or over.

Via 404 Media The best antivirus for all budgets Our top picks, based on real-world testing and comparisons

Read our full guide to the best antivirus 1. Best overall: Bitdefender Total Security 2. Best for families: Norton 360 with LifeLock 3. Best for mobile: McAfee Mobile Security Follow TechRadar on Google News and add us as a preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/apple-finally-patches-hide-my-email-sec urity-flaw-a-year-after-it-was-first-discovered


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)