Defense Contractor IEH Corporation Reports Major Cybersecurity Incident

IEH Corporation, a US-based manufacturer of high-performance electronic connectors for the defense sector, has reported a major cybersecurity incident. On August 4, the company identified that an unauthorized actor had gained access to an employee's Microsoft 365 mailbox.

The threat actor used a phishing attack, impersonating a prospective business contact and delivering a hyperlink disguised as a Microsoft document-sharing link. The user accessed the link and entered their Microsoft 365 credentials into a fraudulent login page, resulting in unauthorized account access.

The compromised mailbox contained sensitive company information, including emails, attachments, customer communications, purchase orders, engineering documents, and potentially export-controlled technical information. However, IEH Corporation reported that there is no evidence of unauthorized emails being sent or data being exfiltrated during the breach.