Apple Hide My Email Vulnerability Lets Attackers Reveal Users’ Real Email Addresses

Apple’s Hide My Email feature reportedly contains a vulnerability that allows attackers to uncover users' real email addresses from disposable aliases. Independent tests (including a claim of 100% exploitability in limited volunteer tests) and 404 Media confirmation indicate the issue is reproducible; it was reported to Apple in 2025 but remained unpatched at the time of reporting, exposing users to phishing, spam, tracking, and potential account takeover — users are advised to avoid using the feature for high‑risk accounts until a fix is released.