Apple faces class action lawsuit for 'fraud' over iCloud Private Relay flaw

Security researchers last week revealed a flaw in Apple’s iCloud Private Relay feature. While this is supposed to protect your IP address from the websites you visit, a vulnerability means that it often fails to do so.

Any time there’s a problem with an Apple product or service, a class action lawsuit is sure to follow, and this is no exception …

As we’ve explained previously, iCloud Private Relay isn’t quite a VPN, but it is intended to fulfil a similar privacy function in terms of preventing your web usage being tracked when you are using Safari as your browser. Here’s how Apple describes it:

In other words, your ISP sees only that you are accessing an Apple server, and the website you visit sees only an IP address generated by that server.

Security researchers found that any website that supports passkeys can see your real IP address.

Worse, it doesn’t even matter whether the website actually supports passkeys: just pretending it does so will reveal your IP address.

A class action lawsuit accusing Apple of false advertising, misrepresentation, and fraud has now been filed by Clarkson Law Firm – the same lawyers who previously obtained a $250M settlement over the delayed launch of Siri AI.

Tim Giordano, a partner at Clarkson, told us the firm considers it an “outrageous betrayal of consumer trust.”

We’ve reached out to Apple for comment and will update with any response.