World news and discussion on TalkFuse.
Attacker phished way into US defense supplier’s Microsoft 365 account
IEH Corporation, a US defence and aerospace supplier, says an attacker accessed a staff member’s Microsoft 365 account after the employee was deceived by a phishing email posing as a prospective business contact. The breach matters because the mailbox contained engineering documents and potentially export-controlled technical information, although the company says it has found no evidence that data was copied or taken.
IEH discovered the incident on 4 August and secured the affected account, disabled malicious mailbox rules and began reviewing its Microsoft 365 security and authentication controls. The company did not say when access began or how long it lasted, and expects no material operational impact; its connectors are used in systems including military aircraft, missiles, satellites and US weapons programmes.
In short
- Phishing gave an attacker access to IEH’s Microsoft 365 mailbox.
- Potentially export-controlled engineering data was accessible.
- IEH found no confirmed data theft or operational disruption.
Explained simply
IEH Corporation makes connectors used in aerospace and defence systems, including military aircraft, satellites and missiles. Its work can involve technical material subject to US export controls, which restrict how certain information may be shared with people outside the United States.
Microsoft 365 is a set of online tools that includes email and file storage. A phishing email tries to trick someone into revealing login details or granting access, so an attacker who gets into a work account may be able to see information available through it.
The incident matters because the account held engineering documents and may have included controlled technical information. IEH has said it found no evidence that data was copied or taken; the episode also raises questions about how organisations protect staff accounts and detect unauthorised access.