Apple Faces Consumer Lawsuit Over Hide My Email Security Flaw Affecting Millions of iCloud+ Users

According to Fox News, Apple faced a consumer lawsuit filed on July 15 in federal court over security vulnerabilities in its Hide My Email feature. The suit alleges that the feature failed to protect users' real email addresses as advertised, with testing showing that 100% of sampled alias email addresses could be compromised without special permissions.

A security researcher discovered the flaw in June 2025 and reported it to Apple. Apple acknowledged the issue in July 2025, claimed to have fixed it in March 2026, but the vulnerability persisted. Despite promising a patch by May 2026, Apple has not delivered, according to the complaint. Millions of iCloud+ subscribers are potentially affected.