Apple's Hide My Email is a privacy tool offered to iCloud+ subscribers that creates anonymous email addresses to shield users from spam, trackers, and potential data breaches by hiding their real contact information. However, a newly reported vulnerability undermines this protection by enabling hackers to connect anonymous Hide My Email addresses back to users' genuine email accounts.

Security researchers at EasyOptOuts discovered the flaw and notified Apple approximately one year ago, with the company responding that it was investigating or deploying fixes. Despite this, the vulnerability remains unpatched. When researchers tested the exploit for publication, they found that 100% of the Hide My Email addresses they examined were vulnerable to the attack, though the specific technical details have been withheld to avoid putting users at immediate risk. The researchers have stated that Apple users should be aware of this limitation to their privacy protection.