Back Feeds.4Sysops

Phishing attack breaches US defense supplier’s Microsoft 365 account

Feeds.4Sysops •IT News • August 7, 2026

U.S. defense and aerospace supplier IEH Corporation disclosed that a phishing attack gave an intruder access to a Microsoft 365 mailbox containing engineering documents and potentially export-controlled technical information. The company says it found no evidence of data exfiltration, but the investigation remains ongoing. Source

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Phishing Attack Breaches IEH Corporation's Microsoft 365 Account On August 4, 2026, IEH Corporation discovered unauthorized access to an employee's Microsoft 365 mailbox due to a phishing attack. A threat actor impersonated a prospective business and sent a fraudulent link, leading the employee to enter their credentials on a fake login page. The attacker accessed sensitive information, including emails, attachments, and potentially export-controlled technical data. However, IEH reported no evidence of data exfiltration or unauthorized emails sent from the account. The compromised account has since been secured, and the company is reviewing its security controls. The incident has not disrupted business operations, and IEH does not expect a material impact on its operations. The investigation is ongoing, and affected parties will be notified if necessary. 7 sources 54

Extracted Entities

Phishing attack breaches US defense supplier’s Microsoft 365 account

The full story

Extracted Entities

Attack Types (1)

Companies (1)

MITRE ATT&CK (1)

Platforms (1)