Apple sued over iCloud+ Hide My Email privacy flaw allegedly exposing users' real addresses

Apple is facing a proposed class action lawsuit alleging that its 'Hide My Email' feature, part of iCloud+ and Sign in with Apple, fails to conceal users' real email addresses from websites and apps. The complaint, filed in federal court, claims Apple was aware of the vulnerability as early as June 2025 when a security researcher reported it. Apple acknowledged the bug in July 2025 and said it would release a patch by May 2026, but the fix never materialized, prompting the researcher to go public. Independent testing reportedly found 100% of examined aliases were exploitable. The lawsuit, brought by San Diego resident Anthony Alvarez, seeks compensation for millions of iCloud+ subscribers who paid for privacy protections that allegedly did not work as advertised. Apple has not yet commented on the lawsuit.

First published Aug 4, 01:51 PM UTCUpdated Jul 17, 06:06 PM UTC1 reports · 1 sources

Editorial responsibility

Prepared by: WorldAttention Editorial Systems
Human review: No named human review is recorded for this page.
Automated steps: Reports are grouped by semantic similarity and deterministic rules. Language models may assist titles, summaries, translation and cross-source analysis; the page itself is projected from evidence records.
Page status: Current automated evidence projection
Last updated: Jul 17, 06:06 PM UTCEditorial record as of Aug 4, 01:51 PM UTC

How automation and AI are used · Report a correction or rights issue

Wire timeline

currentJul 17, 06:06 PM UTC

Apple sued over iCloud+ Hide My Email privacy flaw allegedly exposing users' real addresses

Coverage sources

External reporting used to assemble this Story.

Apple sued over iCloud+ Hide My Email privacy flaw allegedly exposing users' real addressesYahoo FinanceWesternJul 17, 06:06 PM UTC

Follow the context

San Diego Apple