Apple hit with lawsuit claiming iCloud+ privacy tool could expose users’ real emails to websites

Apple is facing a proposed class-action lawsuit over its iCloud+ “Hide My Email” privacy feature, which plaintiffs claim can expose users’ real email addresses to websites and apps. The suit alleges Apple knew about the vulnerability as early as last summer, acknowledged the bug, but failed to fully fix it despite continuing to market the feature as a privacy protection. A security researcher reportedly found the flaw in June 2025 and later said Apple’s promised patch never arrived. The case could become a broader class action if the court finds thousands or millions of users were affected. The headline risk is reputational rather than immediately financial, but the allegations may pressure Apple’s privacy branding, potentially increase legal costs, and add to concerns around iCloud trust and consumer protection.