IEH Corporation, a U.S. defense and aerospace manufacturer, has confirmed it experienced a cybersecurity incident stemming from a phishing attack that compromised an employee's Microsoft 365 mailbox. The breach, discovered on August 4, 2026, potentially exposed sensitive information, including export-controlled military data.
The company, based in Brooklyn, New York, specializes in high-reliability electrical connectors used in critical military and aerospace applications such as THAAD and Patriot missile systems, fighter aircraft, satellites, and torpedoes. IEH reported the incident in an 8-K filing with the U.S. Securities and Exchange Commission (SEC).
According to IEH's disclosure, the attack began when an employee clicked on a malicious link disguised as a Microsoft document-sharing invitation. The link was sent by a threat actor impersonating a prospective business contact. Upon clicking, the employee was directed to a fraudulent login page where they entered their Microsoft 365 credentials, granting the attacker unauthorized access to their inbox.
The investigation revealed that the attacker accessed the employee's mailbox, which contained emails, attachments, customer data, and engineering documents. Crucially, the compromised data may include "export-controlled technical information," which falls under U.S. International Traffic in Arms Regulations (ITAR) and Export Administration Regulations (EAR). Unauthorized disclosure of such data to foreign parties could constitute a federal violation.
IEH stated that it took immediate action to contain the unauthorized access as soon as the incident was observed. This included securing the compromised account and removing malicious mailbox rules that the attacker had established, suggesting an attempt to maintain persistence or silently intercept future communications.
While the company has not confirmed any data exfiltration, the potential exposure of export-controlled information is a significant concern. IEH, which reported nearly $30 million in revenue for fiscal year 2026, is a smaller entity within the defense supply chain, making it a target for adversaries seeking sensitive military-related data.
Despite the breach, IEH currently has no evidence that the incident will materially impact its business operations. The company is continuing its investigation into the scope and impact of the cyberattack.
