Millions of Apple users pay for an iCloud+ subscription to hide their email addresses and browse out of sight. However, email anonymity on iCloud ends where a legal investigation begins. An American court document has just demonstrated this in a particularly concrete way.
Threatening email sent to FBI director’s girlfriend
On February 28, 2026, Alexis Wilkins, companion of FBI Director Kash Patel, received a message containing violent threats. The sender had used an address generated by Apple’s “Hide My Email” feature. This feature, reserved for iCloud+ subscribers, allows you to create random aliases to hide your identity. In other words, the real name of the author did not appear anywhere.
Wilkins immediately relayed this message to law enforcement. The FBI then asked Apple to go back to the source. Indeed, to route emails to the correct inbox, Apple maintains an internal link between each alias and the user’s main account. It is precisely this technical data that the investigators requested via an official request.
According to court documents viewed by 404 Media, Apple quickly provided the real name, primary email address and account history. The sender’s profile was now in the hands of the authorities.
Apple’s response did not surprise any specialist. However, it constitutes one of the rare documented cases where the exact operation of this lifting of anonymity is detailed in a public judicial document.
134 hidden addresses, only one Apple ID
The man identified is called Alden Ruml. He resides in Cambridge, Massachusetts. His iCloud+ account had generated 134 different random addresses. This figure, specified in the indictment, shows the extent to which certain subscribers exploit the functionality to compartmentalize their digital lives. However, all these addresses remained linked to a unique identifier at Apple.
As detailed by CyberInsider, the firm also transmitted the list of devices associated with the account and the connection IP addresses. These devices included an iPhone 17 Pro, an iPad Mini and an Apple Watch Ultra 3. This data allowed investigators to locate the suspect.
Confronted by federal agents at his home, Ruml admitted to having sent the message. He explained that he acted out of anger, after reading a press article on the security means mobilized by the government to protect Wilkins. However, he affirmed that he never had the intention of taking action or carrying out his threats.
A grand jury indicted him on March 12, 2026, for transmitting threats by electronic means interstate. Investigators also requested additional warrants. In particular, they wanted to access the content of his devices and deactivate biometric protections.
The anonymity of emails on iCloud in the face of legal requisitions
This case illustrates a fundamental distinction that many users are still unaware of. The “Hide My Email” feature protects against commercial tracking and third-party spam. On the other hand, it offers no protection against a formal judicial requisition. Moreover, the general conditions of iCloud specify that Apple can transmit personal data to the authorities in certain well-defined circumstances.
As 9to5Mac points out, the firm publishes transparency reports twice a year. These documents detail the number of requests received by country and the responses provided. However, few subscribers take the time to consult them.
Additionally, unlike iMessage’s end-to-end encryption, the email aliasing system relies on a mechanism that is transparent to Apple. Concretely, the Cupertino company must know the final destination of each alias to redirect messages. This operation makes the lifting of anonymity trivial as soon as a judge orders it.
From now on, this case constitutes a documented precedent for all iCloud+ subscribers. She reminds us that the confidentiality promises of technological giants have very real limits, engraved in their own conditions of use.
