--- title: "Class Action Lawsuit Against Apple: iCloud 'Private Relay' Exposes Users' Real IP Addresses" description: "🍎 Apple faces a new lawsuit: researchers found that the iCloud 'Private Relay' feature may expose users' real IP addresses. Lawyers have accused the company of fraud, claiming users are paying for protection that doesn't exist. #Apple #CyberSecurity #Privacy" date: 2026-08-11T23:09:23.000Z lang: en url: https://xab.info/en/posts/class-action-lawsuit-against-apple-icloud-private-relay-exposes-ip-addresses tags: [apple, icloud, cybersecurity, lawsuit, privacy, private-relay] publisher: "XAB.info" --- # Class Action Lawsuit Against Apple: iCloud 'Private Relay' Exposes Users' Real IP Addresses ![Apple logo on store facade illustrating news about class action lawsuit over iCloud Private Relay IP leak](https://xab.info/media/2026/08/12/apple-isk-icloud-chastnyj-uzel-ip-adyres/apple-isk-icloud-chastnyj-uzel-ip-adyres-1.webp) ## 🎯 Key Points - Law firm Clarkson filed a class-action lawsuit against Apple due to a vulnerability in iCloud Private Relay. - The vulnerability allows websites to identify a user's real IP address through requests sent outside the browser. - Plaintiffs accuse Apple of fraud and breach of privacy protection obligations. - Apple previously paid $250 million in a Clarkson lawsuit related to Siri. In early August 2026, Apple faced a serious legal challenge that calls into question the effectiveness of one of the key security features of its ecosystem. The law firm Clarkson filed a class-action lawsuit against the tech giant, accusing it of fraud and breach of privacy protection obligations. At the center of the conflict is the 'Private Relay' feature, which is part of the paid iCloud+ subscription and is positioned as a tool for hiding users' digital footprints. ### Technical essence of the vulnerability: how the bypass works The 'Private Relay' feature was developed to ensure privacy similar to a VPN, but with a more refined architecture. In normal mode, it splits the connection into two stages: the provider and Apple's first relay see the user's real IP address but do not know the destination; the second relay (a third-party partner) knows the destination address but does not know the client's IP address. Cybersecurity researchers discovered a critical flaw in this scheme related to Access Tokens technology. The vulnerability lies in the fact that the user's device sends web requests outside the browser context. If the website the user visits supports access tokens (or even just simulates support for them), it can intercept these requests and reveal the user's real IP address. This happens unnoticed by the user, who believes their traffic is securely encrypted and hidden. ### Accusations of fraud and betrayal of trust The law firm Clarkson, which initiated the lawsuit, has previously succeeded in court against Apple, winning $250 million for delays in updating Siri's artificial intelligence features. This time, the argumentation is based on a fundamental breach of trust. In their statement, lawyers noted that Apple built its global brand on the promise of protecting privacy, and no other company markets this as aggressively. According to the plaintiffs, users have paid for a feature for years that effectively did not work as advertised, exposing them to tracking, profiling, and targeted advertising. Clarkson calls this an 'outrageous violation and betrayal of consumer trust and the law.' The lawsuit qualifies Apple's actions as fraud, as the company continued to sell the iCloud+ subscription while knowing or ignoring potential risks. ### Lack of reaction and context of the incident At the time of publication (August 12, 2026), no official comment had been received from Apple representatives. The company traditionally waits before making public statements on security issues, but in this case, silence could be perceived as a lack of a quick plan to fix the situation. The 'Private Relay' incident serves as another reminder that even in 2026, data privacy issues remain one of the most vulnerable points in the digital ecosystem, despite claims of 'privacy by default'. ## πŸ” Fact-Check Verification - [Apple faces class action lawsuit for 'fraud' over iCloud Private Relay flaw](https://9to5mac.com/2026/08/11/apple-faces-class-action-lawsuit-for-fraud-over-icloud-private-relay-flaw/) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ ΠΏΠΎΠ΄Π°Ρ‡Ρƒ иска Clarkson ΠΈ ΠΎΠ±Π²ΠΈΠ½Π΅Π½ΠΈΠ΅ Π² ΠΌΠΎΡˆΠ΅Π½Π½ΠΈΡ‡Π΅ΡΡ‚Π²Π΅. - [iCloud Private Relay failures manifest a new class-action lawsuit against Apple](https://appleinsider.com/articles/26/08/11/icloud-private-relay-failures-manifest-a-new-class-action-lawsuit-against-apple) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½ΠΎ ΠΏΠΎ источнику appleinsider.com - [Apple faces class action over alleged iCloud Private Relay privacy failures: Report](https://www.msn.com/en-in/technology/tech-companies/apple-faces-class-action-over-alleged-icloud-private-relay-privacy-failures-report/ar-AA29RdEu) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π΅Π½ΠΎ ΠΏΠΎ источнику msn.com - [Apple Accused of 'Fraud' in iCloud Private Relay Class Action Lawsuit](https://www.macrumors.com/2026/08/11/icloud-private-relay-class-action-lawsuit/) - ΠŸΠΎΠ΄Ρ‚Π²Π΅Ρ€ΠΆΠ΄Π°Π΅Ρ‚ тСхничСскиС Π΄Π΅Ρ‚Π°Π»ΠΈ уязвимости с ΠΊΠ»ΡŽΡ‡Π°ΠΌΠΈ доступа. ## ❓ FAQ ### Q: What is iCloud Private Relay? **A:** It is an iCloud+ subscription feature designed to hide the user's IP address and ensure privacy on the internet. ### Q: What is the vulnerability? **A:** Websites can obtain the user's real IP address through requests sent outside the browser, even if the feature is enabled. ### Q: Why was the lawsuit filed? **A:** Lawyers believe Apple sold non-functional protection, which constitutes fraud and a breach of trust.