Hide My Email flaw still worked two weeks after Apple’s claimed fix
AI-summarised brief · reviewed before publication
Apple claimed to patch a Hide My Email flaw on July 3, 2026, but independent testing on July 17 showed the vulnerability still existed. The bug allowed a sender with a specific alias to uncover the real email address, undermining the service’s privacy promise. EasyOptOuts researchers had reported the issue to Apple in mid‑2025, and Apple’s earlier fixes on March 3 and June 30 were later disproved. Apple has not clarified the patch rollout or why the July 17 test succeeded, leaving uncertainty about the fix’s completeness.
💡 Why It Matters
- · The flaw exposes a core privacy feature of Apple’s email‑alias service, potentially linking users’ permanent addresses to publicly available data.
- · This undermines consumer trust in Apple’s security promises and could prompt legal action and broader scrutiny of the company’s patch‑deployment practices.