Apple Fixes Hide My Email Bug Exposing Real Addresses

Apple addressed a security vulnerability in its Hide My Email service that inadvertently exposed users' actual email addresses within mail logs, compromising the feature's core privacy function. The company deployed a fix for this issue on July 3, 2026. This resolution followed a disclosure made to Apple over a year prior by Tyler Murphy, co-founder of EasyOptOuts, who identified the flaw. The Hide My Email feature is designed to create unique, random email addresses that forward to a user's real inbox, thereby masking their personal address from third parties and reducing spam. The bug's existence meant that in certain circumstances, the original, unmasked email address could be found within the metadata of forwarded emails, negating the intended anonymity. Murphy's discovery and subsequent reporting to Apple were instrumental in prompting the company to develop and implement a solution. The fix aims to restore the full privacy protections promised by the Hide My Email service, ensuring that users' personal email addresses remain concealed from external entities when using the feature. This incident highlights the ongoing challenges in maintaining robust privacy safeguards within digital services, even for established technology companies like Apple. The company has not publicly detailed the technical specifics of the vulnerability or the exact nature of the fix beyond its deployment.