Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs
Apple has fixed a security flaw in its Hide My Email service that exposed users' real email addresses in mail logs. The issue was reported to Apple over a year ago and was patched on July 3, 2026.
Intelligence analysis by Llama

Apple has addressed a security flaw in its Hide My Email service that allowed users' real email addresses to be unmasked. The issue was reported to Apple over a year ago and was patched on July 3, 2026.
Imagine you have a special email address that hides your real email address. But what if someone could figure out your real email address just by sending you a message that got rejected as spam? That's what happened with Apple's Hide My Email service, which was supposed to keep your email address private. But a bug in the service made it possible for people to find out your real email address. Apple fixed the bug, but it's a reminder that even with the best security, there can be flaws that need to be addressed.
Analysis
A Year of Unaddressed Concerns
Apple's Hide My Email service was announced in June 2021 as a way to safeguard user privacy and tackle unwanted spam. However, a security flaw in the service was reported to Apple on June 13, 2025, but was not addressed until July 3, 2026. The issue was that simply sending a targeted Hide My Email user a message that got rejected as spam caused the person's real email address to appear in email logs.
The Impact of the Bug
The bug had significant implications for users who relied on Hide My Email for their privacy. While the exact number of affected users is unknown, it is clear that the bug was a major concern for those who used the service. The fact that Apple was aware of the issue for over a year and failed to address it has raised questions about the company's commitment to user privacy.
The Class Action Lawsuit
Apple is facing a class action lawsuit over the issue, with the plaintiffs accusing the company of misleading customers about the privacy of its Hide My Email feature. The lawsuit claims that Apple promised Hide My Email as a privacy feature that customers paid for, but failed to deliver it. The plaintiffs are seeking damages and a court order requiring Apple to disable the feature until it is fixed.
Key points
- Apple has fixed a security flaw in its Hide My Email service that exposed users' real email addresses in mail logs.
- The issue was reported to Apple over a year ago and was patched on July 3, 2026.
- Apple is facing a class action lawsuit over the issue, with the plaintiffs accusing the company of misleading customers about the privacy of its Hide My Email feature.
The fix of the bug in Apple's Hide My Email service is a positive step towards improving user privacy. It shows that Apple is taking steps to address security concerns and protect its users' data.
The fact that Apple was aware of the bug for over a year and failed to address it raises concerns about the company's commitment to user privacy. It also highlights the importance of regular security audits and testing to catch such issues before they become major problems.



