July 21, 2026
Hide My Email? More like Hide My Panic
Apple Fixes Hide My Email Vulnerability After 404 Media Coverage
Apple’s ‘secret email’ fix is here, but commenters are still side-eyeing the whole thing
TLDR: Apple says it fixed a paid privacy feature that could expose users’ real email addresses, but only after media coverage and with a lawsuit already looming. Commenters aren’t celebrating much—they’re arguing over whether the fix is complete, whether Apple can be trusted, and whether the whole idea was flawed from the start.
Apple has finally patched a flaw in Hide My Email—the paid iCloud feature that’s supposed to keep your real address private—after 404 Media reported on it and after Apple had apparently known about the problem for over a year. That timing alone lit up the comments. The mood was less “great, it’s fixed” and more “why did it take public embarrassment and a lawsuit?” With a class action now in the mix, the community reaction was basically a chorus of raised eyebrows.
The spiciest reactions weren’t even just about Apple being slow. Some commenters flat-out questioned whether the privacy shield is really fixed at all. One person warned that Apple’s Mail app may still reveal account info in some cases, while another complained Apple still seems attached to a special domain for private emails that would make them easy to block—hardly the stealth mode users thought they were buying. In other words: the trust damage may outlast the patch.
Then came the classic internet split-screen moment: suspicious power users on one side, confused developers on the other. One commenter basically said the explanation of the bug was so vague it was impossible to verify, while another asked the painfully practical question: if people use hidden email aliases, how are apps supposed to know who’s who? The accidental comedy here is brutal—Apple sold a privacy feature so mysterious that even the people discussing it sounded like they were trapped in an escape room made of bounced emails, spam filters, and corporate PR.
Key Points
- •Apple said it patched the Hide My Email vulnerability on July 3 and told 404 Media the issue is fully resolved.
- •The article states that Apple had known about the vulnerability for more than a year before fixing it.
- •Tyler Murphy of EasyOptOuts discovered the flaw and reported it to Apple in June 2025.
- •After the fix, 404 Media reported that exploitation involved sending a message that was rejected as spam, which could reveal the user’s real email address.
- •A class action lawsuit against Apple seeks recovery of subscription costs and an injunction related to the alleged deceptive conduct around the feature.