Recently 404 Media reported on a vulnerability with the iCloud+ ‘Hide My Email’ feature that allowed anyone to access a user’s real email address. Now, Apple says the issue has officially been fixed.
If you’re an iCloud+ or Apple One subscriber, Apple offers a ‘Hide My Email’ privacy feature that can be especially handy for protecting your real email.
But per the recent 404 Media report, a bug has long existed in Hide My Email that lets anyone expose the real email address tied to the Apple account. This revelation sparked a new proposed lawsuit.
Today though, Apple says the vulnerability was officially fixed earlier this month.
Apple told 404 Media that it “deployed a patch for the issue on July 3, which the company says has fully resolved the issue.”
The iCloud+ vulnerability was first reported to Apple in June 2025 by Tyler Murphy. After an initial exchange in which Apple claimed to have fixed it, Murphy found the issue still existed. Hopefully this time around though, the problem has truly been taken care of.
How often do you use the Hide My Email feature with iCloud+? Let us know in the comments.
FTC: We use income earning auto affiliate links. More.
Check out 9to5Mac on YouTube for more Apple news:
iCloud is built into every Apple device, so that…
Ryan got his start in journalism as an Editor at MacStories, where he worked for four years covering Apple news, writing app reviews, and more. For two years he co-hosted the Adapt podcast on Relay FM, which focused entirely on the iPad. As a result, it should come as no surprise that his favorite Apple device is the iPad Pro.
