By Connor Jones
Publication Date: 2026-08-07 11:32:00
Security
Intruder gained access to engineering files and potentially export-controlled technical data
US defense and aerospace supplier IEH Corporation ‘fessed up that a criminal managed to break into its Microsoft 365 mailbox in a filing with regulators.
In a Form 8-K filed with the Securities and Exchange Commission on Thursday, IEH said one of its staffers fell for a phishing scam that gave an attacker access to its M365 environment.
The attacker “impersonated a prospective business contact” and sent the employee what appeared to be a genuine Microsoft sharing link. The accompanying fake login page duly harvested the victim’s M365 credentials.
“The threat actor gained access to mailbox contents, including email messages, attachments, customer communications, purchase orders, engineering-related documentation, and potentially export-controlled technical information,” IEH said in the SEC filing [PDF].
IEH…
