IEH Corporation (OTCQX: IEHC) reports Microsoft 365 email incident
Rhea-AI Filing Summary
IEH Corporation reported a cybersecurity incident discovered on August 4, 2026, involving unauthorized access to a Microsoft 365 mailbox following a phishing attack. A threat actor obtained an employee’s credentials and could view emails, attachments, customer communications, purchase orders, engineering documents, and potentially export-controlled technical information.
IEH states there is no current evidence that information was transmitted externally, downloaded, or that emails were sent from the compromised account, though sensitive data was accessible during the compromise period. The account has been secured, malicious mailbox rules disabled, and Microsoft 365 security controls are under review. IEH is analyzing impacted communications, will notify affected parties and regulators if required, believes the incident will not have a material adverse effect on business operations, and continues its investigation.
Positive
- None.
Negative
- None.
8-K Event Classification
Item 8.01 — Other Events
1 item
Item 8.01
Other Events
Other
Voluntary disclosure of events the company deems important to shareholders but not covered by other items.
Key Figures
Incident discovery date: August 4, 2026
Report signing date: August 6, 2026
Registrant telephone: (718) 492-4440
3 metrics
Incident discovery date
August 4, 2026
Date IEH identified unauthorized access to a Microsoft 365 mailbox
Report signing date
August 6, 2026
Date the Chief Financial Officer signed the current report
Registrant telephone
(718) 492-4440
Phone number for IEH Corporation’s principal executive offices
Key Terms
cybersecurity incident, phishing attack, export-controlled technical information, forward-looking statements
4 terms
cybersecurity incident technical
"IEH Corporation discovered that it sustained a cybersecurity incident"
A cybersecurity incident is an event where someone's computer systems or data are attacked or broken into without permission. It matters because it can lead to stolen information, financial loss, or disruptions in services, similar to a break-in at a store that damages property or steals valuable items.
phishing attack technical
"the compromise originated from a phishing attack in which a malicious actor"
export-controlled technical information regulatory
"and potentially export-controlled technical information"
forward-looking statements regulatory
"Certain of the statements included in this Report constitute forward-looking statements"
Forward-looking statements are predictions or plans that companies share about what they expect to happen in the future, like estimating sales or profits. They matter because they help investors understand a company's outlook, but since they are based on guesses and assumptions, they can sometimes be wrong.
AI-generated analysis. How Rhea-AI works. Not financial advice.
FAQ
What cybersecurity incident did IEH Corporation (IEHC) report?
IEH Corporation reported a cybersecurity incident in which a threat actor gained unauthorized access to an employee’s Microsoft 365 mailbox via a phishing attack. The intruder could view emails, attachments, customer communications, purchase orders, engineering documents, and potentially export-controlled technical information.
How did the IEH (IEHC) email account compromise occur?
The compromise stemmed from a phishing attack where a malicious actor impersonated a prospective business contact and sent a fraudulent Microsoft document-sharing link. The employee entered Microsoft 365 credentials on a fake login page, allowing unauthorized mailbox access.
Was any data exfiltrated in IEH Corporation’s (IEHC) incident?
IEH states it has no evidence that information was transmitted externally, downloaded, infiltrated, or that unauthorized emails were sent. However, sensitive information was accessible to the threat actor during the compromise period while the mailbox was exposed.
What information was exposed in IEH’s (IEHC) mailbox incident?
The threat actor could access mailbox contents, including email messages, attachments, customer communications, purchase orders, engineering-related documentation, and potentially export-controlled technical information, during the time the Microsoft 365 account was compromised.
What steps has IEH Corporation (IEHC) taken after the incident?
IEH secured the affected account, disabled malicious mailbox rules, preserved evidence, and began reviewing Microsoft 365 security controls and authentication protections. The company is analyzing impacted communications and will notify affected parties and regulators if required.
Does IEH Corporation (IEHC) expect a material business impact from the cyber incident?
IEH states it believes the incident will not have a material adverse effect on its business operations as of the report date, although its investigation of the cybersecurity incident is ongoing and additional review work continues.