Apple fixes iCloud+ vulnerability that exposed ‘hidden’ user emails

Apple has patched an iCloud+ Hide My Email bug that could expose a user’s real email address behind a masked alias.

The issue was reported in June 2025 and fixed by July 3, according to Apple.

The flaw affected a core privacy feature designed to keep users’ actual email addresses hidden.

The bug raised concerns about trust in Apple’s account protection and privacy tools.