Apple is facing a new class action lawsuit over flaws in iCloud Private Relay that expose user identities. The Clarkson Law Firm, known for a $250M settlement over Siri AI delays, has accused Apple of deceiving consumers with iCloud+ marketing. The lawsuit claims Apple betrayed consumer trust by failing to deliver promised privacy protections.

The security issues stem from WebKit vulnerabilities discovered on August 4, 2026. DNS prefetching, Web Authn for Passkeys, and Web Transport can all reveal user data, including IP addresses, even when using iCloud Private Relay. Apple has yet to comment on the lawsuit.

The previous class-action attempt also involved issues with Apple's security, and the new lawsuit builds on those concerns.