Security flaw unmasks Apple Hide My Email users

Murphy, co-founder of the data removal service EasyOptOuts, verified the issue alongside 404 Media. In controlled tests, every tested alias proved susceptible to de-anonymization. While the specific technical mechanism remains undisclosed to prevent malicious use, the implications for user safety are significant. Publicly accessible people-search databases can easily link exposed email addresses to broader personal profiles, effectively bypassing the protection users rely on for online anonymity.

This incident adds to a pattern of scrutiny regarding Apple’s privacy safeguards. Previous investigations highlighted similar failures, including the transmission of analytics data despite disabled user settings and the exposure of real MAC addresses through supposedly randomized Wi-Fi identifiers. Apple has yet to comment on the current findings, leaving users who depend on the service for protection in a precarious position until a fix is deployed.