A significant flaw exists within Apple's Hide My Email service, allowing the real email addresses behind aliases to be uncovered. This vulnerability was first reported to Apple over a year ago by researcher Tyler Murphy. Despite Apple's acknowledgments and assurances, the issue remains unpatched. 404 Media has independently verified the exploitability of Hide My Email addresses. The vulnerability poses a risk to users who rely on the service for privacy and safety from spam and data breaches. Easy-to-access people-search sites can link the revealed email addresses to other personal information. Apple's repeated statements about investigating the issue and addressing it in system changes or updates have not resulted in a fix. Murphy's suggestion to suspend new alias creation as an interim measure was not apparently acted upon. The service is designed to protect users' primary email addresses by generating random aliases. The continued existence of this flaw leaves Hide My Email users potentially exposed.