U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

IEH Corporation, a U.S. defense and aerospace connector manufacturer, disclosed a phishing-related cybersecurity incident in which an employee entered Microsoft 365 credentials into a fraudulent login page; the attacker gained unauthorized access to the employee mailbox, exposing emails, attachments, customer and engineering documents and potentially export-controlled (ITAR/EAR) information. Malicious mailbox rules were created and later removed; the company contained the account, reports no confirmed exfiltration to date, and continues its investigation.