Apple Faces Lawsuit Over iCloud Private Relay Vulnerability
The firm behind a $250 million Apple settlement is suing the company again, alleging it misrepresented a key security feature.
Apple faces a lawsuit over its iCloud Private Relay feature, which has been found to have a security vulnerability. According to a blog post by Talal Haj Bakry and Tommy Mysk, the feature does not always effectively conceal a user's IP address, contrary to Apple's claims. The vulnerability emerges when using a passkey to sign in or when websites employ two methods for faster data loading.
Edward Rickman, a plaintiff in the lawsuit filed by Clarkson Law Firm on August 6, believed that iCloud Private Relay would protect his IP address and browsing activity when he subscribed to iCloud Plus. The complaint seeks class action status, an injunction against Apple to change its practices, and compensation for consumer deception.
The lawsuit highlights that iCloud Private Relay is a paid service within iCloud Plus, priced between $0.99 and $60 per month. Apple had previously advertised the feature as a secure way to browse the web and avoid tracking. The researchers who discovered the flaw released information publicly rather than alerting Apple first due to the company's lengthy review process.
This is similar to a previous legal victory Clarkson obtained from Apple over the company's AI feature marketing for the iPhone 16 Pro. The researchers who found the flaw in iCloud Private Relay have set up a website to let users check if the feature is protecting their IP address.
Written by urgent.news from CNET's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.