Apple released a security update on July 3 that fixed a vulnerability in the Hide My Email service, which had been inadvertently exposing users' real email addresses, according to a report by 404 Media.

The bug was first reported in June 2025 by Tyler Murphy, but remained unpatched until it was publicly disclosed earlier this month.

The flaw occurred when a Hide My Email user receives a message that is automatically rejected as spam (even if it was a legitimate message), causing the sender's real email address to appear in the email logs.

Users cannot review the spam message log to see if they were affected, because the messages often never reached the inbox.

Although Apple announced a fix for the issue in March 2026, the bug persisted until the matter went public this month, and 404Media confirmed that the leak problem is now fully resolved.

Tip: If you have used Hide My Email before July 2026, it's best to consider changing the hidden email for any important accounts or sensitive correspondence.

Go to top button