Last mentioned: Jul 2, 2026
404 Media independent verification
404 Media validates the flaw using its own alias and confirms the vulnerability persists. Publication follows days later after a final failed check.
Apple claims fix is deployed
Apple notifies EasyOptOuts that the vulnerability has been addressed. Subsequent testing reveals no actual change; exploit remains functional.
Apple confirms both issues under review
Apple acknowledges receipt and states that both the original and second vulnerability are being examined.
Second related vulnerability reported
A separate, allied vulnerability in the same feature is disclosed to Apple.
Additional details shared
EasyOptOuts supplies further information to assist Apple's investigation.
Reproduction steps submitted
Researchers provide Apple with detailed steps to reproduce the exploit, enabling the vendor to trigger the behavior.
Initial vulnerability report
EasyOptOuts co-founders Tyler Murphy and Ben report the flaw to Apple, noting that Hide My Email aliases can be reversed to reveal the real inbox.
A critical privacy vulnerability in Apple's Hide My Email feature went unaddressed for over a year despite responsible disclosure, leaving users exposed to email unmasking. Cybersecurity researchers from EasyOptOuts found that 100% of tested aliases were reversible, and the flaw remains active as of July 2026. Apple acknowledged the bug, but a claimed March 2026 fix failed, highlighting lapses in vulnerability management.
This page surfaces every story mentioning EasyOptOuts across our cybersecurity coverage. We track each entity's appearance over time so readers can trace how the narrative evolves — which developments are isolated incidents, which build into longer arcs, and which reframe how operators in the space think about the entity. Story selection uses the same multi-source verification gate applied across the rest of our coverage.
Read our editorial methodology for how we identify, deduplicate, and score entity references. Our glossary defines the technical terms used across stories on this page, and our trends index contextualizes individual developments against the longer-running cybersecurity beat. Cross-entity comparisons live on our compare view.
| What you see | What it tells you |
|---|---|
| Story count | Number of distinct stories where EasyOptOuts was a primary or referenced actor. |
| Recency clustering | Whether mentions are concentrated in a recent window (a news cycle) or distributed (a sustained arc). |
| Sentiment distribution | Aggregate sentiment of the stories mentioning this entity, weighted by impact score. |
| Cross-niche links | When the same entity surfaces in our sibling networks, we link to those views to enrich context. |