Apple faces lawsuit over iCloud Private Relay privacy flaws

Security researchers have identified vulnerabilities in Apple’s iCloud Private Relay service, which is designed to mask user IP addresses and encrypt Safari browsing traffic. Investigations by researchers Tommy Mysk and Talal Haj Bakry revealed that the feature can leak a user's real IP address through DNS prefetching and the WebTransport protocol. Additionally, the use of passkeys may allow websites to bypass the protection and identify the user's location.

Following these findings, the Clarkson Law Firm has filed a class action lawsuit against Apple in the U.S. District Court for the Northern District of California. The lawsuit alleges fraud and deceptive advertising, claiming that iCloud+ subscribers paid for privacy protections that failed to function as advertised. While Apple has not yet responded to the allegations, the legal action seeks to establish class status and could set a precedent regarding privacy claims in the tech industry.