Multiple outlets report that Apple’s “Hide My Email” feature, designed to protect users’ real email addresses by generating aliases, has a longstanding vulnerability that can allow an attacker to determine the underlying real address. The issue was flagged by researcher Tyler Murphy, co-founder of Easy Opt Out, who first reported the problem in 2025. Outlets say Apple did not fully resolve the vulnerability for more than a year, based on independent testing and continued researcher claims. TechRadar and Digital Trends report that even after Apple said it addressed the issue in a system update in March 2026, independent testing indicated the problem persisted. Other reports describe the vulnerability as affecting the privacy guarantees of Hide My Email and say it can be exploited to “unmask” the real email behind an alias. Several sources frame the claim as a security and privacy risk rather than a mass breach, emphasizing the potential for exploitation if attackers target users. Apple is reportedly aware of the issue and previously communicated that it was fixed via an update, but corroborating testing findings suggest the vulnerability remained.