Apple’s ‘Hide My Email’ feature reportedly has a year-old bug that reveals real email addresses

July 2, 2026

(Credit: ink drop – stock.adobe.com)

A bug within Apple's "Hide My Email" feature can reportedly expose a user's authentic email address, potentially putting them at risk of identification, based on information published by Tech Radar.

The vulnerability, discovered by EasyOptOuts co-founder Tyler Murphy, allows individuals with knowledge of the exploit to uncover the real email address masked by the anonymous alias. Murphy reported the issue to Apple over a year ago, providing replication instructions, but says the bug remains unpatched. Apple's "Hide My Email" feature is designed to prevent users' real email addresses from being leaked in data breaches or linked to their identity.

Experts warn that malicious actors could exploit this to uncover the real identity behind an anonymized email. Murphy stated that in limited tests, 100% of "Hide My Email" addresses were exploitable. Apple has indicated that fixes are expected.

Source: Tech Radar

SC Staff

Email security

New phishing-as-a-service platform ARToken offers advanced BEC capabilities

SC StaffJuly 1, 2026

ARToken operates as an affiliate of the EvilTokens phishing-as-a-service operation, which targets Microsoft 365 accounts and bypasses multi-factor authentication.

Scam fraud security warning crime internet technology phishing online alert digital risk protection threat background with danger message spam cyber concept hacking attack email sms caution symbol

Email security

Fake Boots emails target millions in large phishing campaign

SC StaffJune 18, 2026

The campaign, involving nearly 8.9 million email addresses and linked to Romanian threat actors, utilized a compromised Bolivian government website to host the fraudulent Boots checkout page.