Hide My Email flaw still worked two weeks after Apple’s claimed fix
appleinsider.com Jul 21, 2026

Hide My Email flaw still worked two weeks after Apple’s claimed fix

AI-summarised brief · reviewed before publication

Apple claimed to patch a Hide My Email flaw on July 3, 2026, but independent testing on July 17 showed the vulnerability still existed. The bug allowed a sender with a specific alias to uncover the real email address, undermining the service’s privacy promise. EasyOptOuts researchers had reported the issue to Apple in mid‑2025, and Apple’s earlier fixes on March 3 and June 30 were later disproved. Apple has not clarified the patch rollout or why the July 17 test succeeded, leaving uncertainty about the fix’s completeness.

💡 Why It Matters

  • · The flaw exposes a core privacy feature of Apple’s email‑alias service, potentially linking users’ permanent addresses to publicly available data.
  • · This undermines consumer trust in Apple’s security promises and could prompt legal action and broader scrutiny of the company’s patch‑deployment practices.