IEH Corp Reports Cybersecurity Incident Involving Employee Microsoft 365 Mailbox

What Happened
IEH Corporation reported on Form 8-K that on August 4, 2026 it discovered a cybersecurity incident in which a threat actor gained unauthorized access to a Microsoft 365 mailbox of a Company employee. The compromise resulted from a phishing message that impersonated a prospective business contact; the employee clicked a link, entered Microsoft 365 credentials on a fraudulent login page, and the attacker accessed mailbox contents. The company observed and contained the access, secured the account, disabled malicious mailbox rules, preserved evidence, and has initiated corrective actions and a review of Microsoft 365 security and authentication controls.

Key Details

• Discovery date: August 4, 2026; Form 8-K filed August 6, 2026.
• Accessed content included email messages, attachments, customer communications, purchase orders, engineering-related documentation, and potentially export-controlled technical information.
• Company states there is currently no evidence that emails were sent from the account or that data was exfiltrated or downloaded.
• Remediation steps taken: account secured, malicious mailbox rules disabled, evidence preserved, and ongoing investigation and security control reviews; company may notify affected parties and regulators if required.

Why It Matters
For investors, this is a cybersecurity incident that exposed potentially sensitive business and technical information, which could trigger customer notifications, regulatory obligations, or remediation costs. IEH currently believes the incident will not have a material adverse effect on operations and has no evidence of data loss, but it is continuing its investigation and tightening Microsoft 365 protections. Monitor company updates for any confirmation of data loss, required notifications, or material impacts.