Phishing Attack Breaches IEH Corporation's Microsoft 365 Account

On August 4, 2026, IEH Corporation discovered unauthorized access to an employee's Microsoft 365 mailbox due to a phishing attack. A threat actor impersonated a prospective business and sent a fraudulent link, leading the employee to enter their credentials on a fake login page. The attacker accessed sensitive information, including emails, attachments, and potentially export-controlled technical data. However, IEH reported no evidence of data exfiltration or unauthorized emails sent from the account. The compromised account has since been secured, and the company is reviewing its security controls. The incident has not disrupted business operations, and IEH does not expect a material impact on its operations. The investigation is ongoing, and affected parties will be notified if necessary.

Key Points: • IEH Corporation experienced a phishing attack leading to unauthorized access to Microsoft 365. • The attacker accessed sensitive data, including engineering documents and customer communications. • IEH has secured the compromised account and is reviewing security measures.