Apple Fixes Hide My Email Bug That Exposed Real Addresses in Mail Logs

Apple patched a vulnerability in its Hide My Email feature that could unmask users' real email addresses by causing them to appear in email logs when forwarded messages were automatically rejected as spam. The flaw was reported to Apple in June 2025, attempts to patch it occurred earlier in 2026, and a final fix was deployed in July 2026; addresses created before the fix may have been captured in mail transfer logs. A class-action lawsuit accuses Apple of misrepresenting the privacy guarantees of the paid Hide My Email service.