Apple Fixes Hide My Email Vulnerability After 404 Media Coverage

Apple has fixed a vulnerability in its Hide My Email feature that allowed anyone to discover users' real email addresses, but only after 404 Media reported on the issue in July 2026—over a year after the company first became aware of the problem. The vulnerability could be exploited by sending a target user a message that was rejected as spam, revealing their actual email in logs. The fix follows a class action lawsuit filed against Apple over the security flaw.