Apple Sued Over Security Flaw in Hide My Email Feature Affecting Millions of iCloud+ Users, Filed July 15

According to Fox News, Apple faced a consumer class-action lawsuit filed on July 15 over a security flaw in its "Hide My Email" feature that allegedly exposed millions of iCloud+ users' real email addresses. The plaintiff alleged that the feature, which purportedly generates random email aliases to protect users' real addresses, failed as advertised, and Apple had been aware of the issue since at least June 2025 but delayed fixes.

A security researcher discovered the vulnerability in June 2025, reporting it to Apple. According to the complaint, independent testing found that 100% of tested alias email addresses could be reverse-mapped to users' real addresses. Apple acknowledged the flaw in July 2025 but subsequent patches in March and promised fixes in May failed to resolve it, the lawsuit states. The case seeks damages for affected iCloud+ subscribers but does not specify a monetary amount.