Apple's Hide My Email feature, designed to protect user privacy by creating anonymous email aliases, reportedly suffers from a significant vulnerability. A security research team discovered that attackers can potentially link these anonymous addresses back to users' real email contacts. This flaw undermines the core purpose of the privacy feature.

Easy Opt Outs, the group behind the discovery, alerted Apple about the issue approximately a year ago. Despite assurances from Apple that it was investigating or had deployed a fix, the vulnerability persists. Researchers were able to exploit it, demonstrating that 100 percent of tested Hide My Email addresses were exploitable in their limited tests.

The exact technical details of the exploit remain undisclosed to prevent further misuse. However, the researchers feel compelled to disclose the issue due to Apple's inaction. Users of Hide My Email are now aware that their privacy may not be as secure as advertised, potentially exposing them to spam and other risks.

The continued existence of this exploit raises serious questions about Apple's commitment to user privacy and its response to security researchers. For iCloud+ subscribers relying on this feature, the risk of de-anonymization is now a tangible concern.