Apple hit with lawsuit claiming iCloud+ privacy tool could expose users’ real emails to websites
A proposed class action filed in federal court alleges Apple’s “Hide My Email” (part of iCloud+ and Sign in with Apple) can be linked back to users’ real email addresses. The suit says Apple knew of the flaw by last summer, acknowledged a bug in 2025, but did not patch it. Plaintiff Anthony Alvarez seeks damages for iCloud+ customers.
How this was made
The 30-second read
Why it matters
If the court allows the case to proceed and discovery supports the alleged exploitability and delayed patching, Apple could face remediation costs, legal expenses, and potential regulatory attention to privacy/security claims.
Market read
New litigation alleges a concrete privacy vulnerability and delayed patching timeline, creating fresh headline and legal-risk exposure for AAPL.
What to watch
Class action viability depends on standing, proof of material harm, and whether Apple’s later system changes fully addressed the reported bug; outcomes could be far from the complaint’s claims.
Background
Hide My Email was introduced in 2019 and is offered via Sign in with Apple and paid iCloud+ subscriptions, per the complaint.
Ticker impact
Apple is named as the defendant in a proposed class action alleging its iCloud+ Hide My Email feature can expose real emails via a vulnerability.
Near-term impact likely limited unless regulators or Apple admits broader scope; longer-term risk depends on discovery, settlement, or mandated fixes.
The article is a newly filed proposed class action with specific technical allegations (100% exploitable aliases in testing) and claims Apple delayed patching, which can drive headline risk and potential legal costs, but it does not provide a confirmed finding or quantified damages.
Market effects
Highlights heightened scrutiny of consumer privacy features and email-masking implementations across Big Tech.
Primarily US legal/regulatory risk, but can spill into global consumer trust and compliance expectations.
Privacy and security litigation can influence international regulators and consumer protection enforcement beyond the US.
Counterpoint
Apple may argue the feature works as designed and that the alleged exploit is limited or already mitigated, reducing expected financial impact.
Key entities
- companyApple
Defendant in a proposed class action alleging Hide My Email fails to conceal real email addresses from websites and apps.
- plaintiffAnthony Alvarez
Named plaintiff who claims he paid for iCloud+ expecting email privacy that allegedly did not work.
