It Should Not Take Public Pressure

In Apple Fixes Hide My Email Vulnerability After 404 Media Coverage, Joseph Cox reports that Apple has finally patched a privacy flaw discovered by Tyler Murphy.

“For a year, Apple knew that an issue in its Hide My Email feature was exposing customers’ real email addresses.”

Murphy reported the problem to Apple in June 2025. Apple did not fully fix it until July 2026, after 404 Media investigated the vulnerability and made it widely known.

I am disappointed that it took a year and public pressure from journalists for Apple to properly address a vulnerability in a paid privacy feature. Apple should have fixed it much sooner, before customers’ supposedly hidden email addresses had another year to potentially leak into third-party logs.

I am glad it is finally fixed. I am also glad publications like 404 Media exist to keep pushing when enormous companies quietly fail to protect their customers.

Read Joseph Cox’s full report, Apple Fixes Hide My Email Vulnerability After 404 Media Coverage.