New Lawsuit Filed Against Apple for ‘Hide My Email’ Privacy Vulnerability


A couple of weeks ago, I wrote about a bug in Apple’s iCloud Hide My Email tool that appeared to reveal users’ real email addresses to anyone who wanted to find them. On Wednesday, a lawsuit was filed in California, Alvarez v. Apple Inc., accusing Apple of false advertising, fraud and breach of contract for selling a privacy perk that it allegedly could not deliver.

Read more: Best iPhones of 2026

The Hide My Email feature, which lets you generate a temporary, anonymized email address with the iCloud.com domain, is often used to protect privacy when signing up for subscriptions or logging into new or unverified websites. The feature is currently available with a paid iCloud Plus subscription

The lawsuit claims that a known security vulnerability in Hide My Email exposes the true email addresses behind the randomly generated email aliases. The suit says that Apple was made aware of this flaw by a security researcher in June 2025, but left the issue unresolved while continuing to advertise the feature as a secure privacy tool.

The suit, which seeks class action status, requests a jury trial and states that the value of the claims is greater than $5 million. In addition to seeking financial compensation, the suit also requests that Apple fix the Hide My Email vulnerability or disclose its limitations.

An Apple representative didn’t immediately respond to a request for comment. 

The flaw was discovered by Easy Opt Outs and reported to 404 Media, though the details of the flaw were largely kept hidden. Research found that basic online identity search tools could analyze iCloud temporary email addresses and uncover users’ real addresses. 404 Media reported that 100% of the Hide My Email addresses on the two websites tested were exploitable.

That’s why the vulnerability is dangerous. Once a malicious actor has that real email address, they could plug it into any available online public-record database to uncover the user’s name, address, phone number and other sensitive details. It could also be used to gain access to password lists sold from large-scale data leaks. 

It’s worth noting that Apple is planning changes to Hide My Email that could make it less friendly to privacy advocates. Apple’s own reports say it will update the tool later this summer to switch the addresses from “iCloud.com” to “private.iCloud.com.” That could allow websites to filter out the new addresses, forcing Apple users to either substitute their real address or use a third-party temporary website tool instead.

If you use Hide My Email and are worried your own email has been exposed, be patient: Lawsuits like these must go through a lengthy certification process by a court, so it will be a while before they are opened to join, if at all. This suit is divided into Californian and US-wide Apple users. I’ll let you know when it’s possible to join, and who can sign up. 





Source link

Leave a Reply

Subscribe to Our Newsletter

Get our latest articles delivered straight to your inbox. No spam, we promise.

Recent Reviews


Google Pixel 10a

Kerry Wan/ZDNET

Follow ZDNET: Add us as a preferred source on Google.


ZDNET’s key takeaways

  • Android 17 is here, along with the June Pixel Drop.
  • The OS is rolling out to Pixel devices first.
  • Users are getting upgraded productivity, security, and more.

Android 17 is officially here, and it’s a doubly good day for Pixel users, as it’s bringing the June Pixel Drop with it.

Google has rolled out its annual OS update and its latest collection of Pixel-exclusive features at the same time, and the updates pack not only some practical features that will make an impact on how you use your phone daily, but also security protections, some new translation tricks, and more. Pixel Watches — the 2 and later — are included, too, with a potentially life-saving feature addition.

Also: I’m a devoted iPhone user but Android 17 is tempting me with its new video and social features

Here’s a look at what’s new in Android 17, which starts rolling out today to Pixel phones first and then to other devices “throughout 2026,” along with what’s new in the June 2026 Pixel Drop.

What’s new in Android 17?

Since many manufacturers now offer longer update windows, usually 4 to 7 years, a wide range of devices are eligible. The updated OS starts rolling out today to Pixel 6 phones and newer. Samsung’s Galaxy S23 series and newer will get it as One UI 9, along with the Flip 5 and newer, Galaxy A24 and newer, and Tab S9 series. OnePlus will bring Android 17 to the OnePlus 11 and newer.

1. App Bubbles

Perhaps the most useful feature is Bubbles, which lets you turn any app into a floating bubble on your main screen. All you have to do is long-press an app, and it becomes an easy-to-access bubble. If you consistently switch back and forth between apps or need to access a certain app often, like a map or airline app while you’re on a trip, you can now find what you need more quickly.

Pixel Folds are getting a special Bubble Bar at the bottom of the screen that lets you organize, move, and access your recent bubbles from one dedicated space.

2. Additional security

Android 17 is also bringing boosted security. 

To start, you can now grant an app temporary access to your exact location and share only specific contacts. 

Additionally, an enhanced “Mark as lost” feature, located in Find Hub, lets you lock a missing phone with your biometrics, so even if a thief has your passcode, they can’t access anything on your device or turn off tracking. 

Improvements to Live Threat Detection block more suspicious apps and scams, Google explained, and enhanced Advanced Protection mode helps keep you safe from sophisticated threats. Lastly, Google is reducing the number of times someone can attempt to guess your PIN and adding longer wait times between failed attempts.

Also: How to clear your Android phone cache – the 30-second routine every user should be doing

3. Screen reactions and more

Also new is Screen Reactions, which lets you take a selfie video overlaid on a screen recording in lieu of a green screen; a 50/50 gaming mode with a dynamic pad for foldables; and built-in parental controls beyond Pixel devices, so you can set screen time limits and content filtering with a PIN, even if you don’t link your Google Account.

What’s in the June Pixel Drop?

Beyond Android 17, Pixel users are getting several Pixel-specific upgrades in the June Pixel Drop.

1. Custom greetings for Take a Message

Introduced in 2025, Take a Message expands on the Pixel call screening feature and gives you a real-time transcript of what the caller is saying, along with AI-generated follow-up steps. Now, Take a Message has custom greetings, letting you record a personalized outgoing message instead of the default voice.

2. New AI models

Two new AI models are making their way to Android phones. The first is Gemini Omni, a new way to create and edit videos. Gemini Omni lets you type in a prompt and get a custom, high-quality video. This is available on all devices with the Gemini app for Gemini Pro users only.

Also: Everything we saw at Google I/O: Gemini 3.5, Android XR glasses, Spark, and more

Also on the way is Lyria 3, which lets you create original tracks using text prompts or images as inspiration. You can prompt Gemini with the style, vocals, and tempo you want. This is coming to all Android 17 Pixel phones and Folds.

3. Voice Translate for the Pixel 10a

One of the Pixel 10 series’ exclusive features is Voice Translate, which provides a real-time translation on phone calls in the speaker’s voice. ZDNET’s Sabrina Ortiz tried the feature last fall, noting how quickly the feature worked and how well it copied her voice. Voice Translate is getting a small expansion, coming to the Pixel 10a.

Also: iOS 27 envy? 4 features you can already use on an Android phone (including Samsung models)

4. Android Quick Share expansion and more

Pixel users are also getting an expansion of Android Quick Share compatibility with AirDrop, coming to the Pixel 9a and Pixel 8a, and an expansion of Magic Cue to more apps, coming to the Pixel 10 series.

What’s new for Pixel Watches?

Pixel Watches are only getting one new feature, but it’s a potentially big one. Core detection features, including Car Crash Detection, Fall Detection, and Loss of Pulse Detection, are getting emergency sharing. If a severe event is detected, Google explains, your Pixel will call emergency services and notify your chosen contacts. You can toggle emergency contacts on or off for each type of event.

Also: This silent Android feature scans your photos for ‘sensitive content’ – how to uninstall it

Fall Detection is coming to the Pixel Watch, plus the 2, 3, and 4, while Car Crash Detection is coming to the Pixel Watch 2, 3, and 4. Loss of Pulse Detection is only coming to the last two generations, the Pixel Watch 3 and 4.





Source link