U.S. Defense Manufacturer IEH Hit by Phishing Attack, Exposing Potentially Export-Controlled Data

U.S. defense and aerospace manufacturer IEH reported a phishing attack that gave unauthorized access to an employee’s Microsoft 365 mailbox. The attacker may have accessed emails, attachments, customer data, engineering documents, and potentially export-controlled information. No data exfiltration was confirmed.