IEH Corp Reports Phishing Attack That Compromised Employee Email, Potentially Exposing Sensitive Data

summarizeSummary

IEH Corp disclosed a cybersecurity incident in which a phishing attack compromised an employee's email, potentially exposing sensitive business and technical data. The company is investigating and has taken corrective actions.

check_boxKey Events · Legal and Risk Events · IEHC

• Phishing Attack Compromises Employee Email

  On August 4, 2026, a threat actor gained unauthorized access to an IEH employee's Microsoft 365 mailbox via a phishing attack, potentially exposing customer communications, purchase orders, engineering documentation, and export-controlled technical information.

• Sensitive Data at Risk

  The compromised mailbox contained export-controlled technical information, raising potential regulatory and national security concerns given IEH's role as a defense contractor for missile systems.

• No Evidence of Data Exfiltration Yet

  The company states there is no evidence that data was transmitted externally or downloaded, but acknowledges the information was accessible to the unauthorized actor during the compromise period.

• Corrective Actions Underway

  IEH secured the account, disabled malicious mailbox rules, preserved evidence, and initiated a review of Microsoft 365 security controls and authentication protections.

auto_awesomeAnalysis · IEHC · Manufacturing

A threat actor gained access to an IEH employee's Microsoft 365 mailbox through a phishing attack, potentially exposing customer communications, purchase orders, engineering documents, and export-controlled technical information. While the company states there is no evidence of data exfiltration or material adverse effect on operations, the breach's scope—including possible export-controlled data—raises regulatory and reputational risks. For a defense contractor with a record $38M backlog tied to missile systems, any compromise of sensitive technical data could trigger government scrutiny or contract issues.