Defense Supplier IEH Corporation Discloses Microsoft 365 Breach

Defense and aerospace supplier IEH Corporation reported a security incident involving a Microsoft 365 mailbox breach. A cybercriminal gained unauthorized access to sensitive company documents after an employee fell victim to a fraudulent sharing link scam.

The targeted employee's credentials were compromised during the phishing scam, leading to unauthorized mailbox access. IEH Corporation has secured the affected account and initiated corrective remediation steps to prevent further infiltration.

The exact duration of the unauthorized access remains undetermined following the investigation. Although sensitive documents were accessed, the organization confirmed that no official data exfiltration has been verified at this stage.