cyber.hendryadrian.com
Vulnerability & Exploit · thehackernews.com

Apple Patches Hide My Email Flaw That Could Expose Real Addresses in Mail Logs

· Original article ↗

Summary

Apple patched a Hide My Email flaw that could expose users’ real addresses in mail logs when messages were rejected as spam. The issue was reported in June 2025; addresses may remain in logs from before the fix.

Key points

  • A message rejected as spam could cause a Hide My Email user's real address to appear in email logs.
  • Tyler Murphy of EasyOptOuts reported the issue to Apple on June 13, 2025.
  • Apple deployed a fix on July 3, 2026, after earlier patch attempts.
  • The article says real addresses linked to Hide My Email addresses created before July 7, 2026, may have been captured in mail transfer logs.
  • Apple faces a class action lawsuit alleging it misrepresented Hide My Email's privacy protections.

Article Details

Vulnerability Types
  • Email address disclosure through mail logs
Exploitation Status
unknown
Exploit Availability
unknown
Patch Status
available

People

Ben WeinerCo-founder of EasyOptOuts who described the potential exposure of real email addresses in mail logs.Tyler MurphyCo-founder of EasyOptOuts who reported the flaw to Apple in June 2025.

Vendors

AppleApple has fixed a flaw in its Hide My Email service that could expose users’ real email addresses when messages were rejected as spam.

Products

Hide My EmailApple has fixed a flaw in its Hide My Email service that could expose users’ real email addresses when messages were rejected as spam.iCloud+#HideMyEmail #Apple #iCloud+

Related Articles