Top US defense device maker IEH Corporation admits hackers broke into its systems
Someone used social engineering to access an employee's email account, viewing purchase orders, engineering-related documentation, and more.
Hackers breached the email inboxes of IEH Corporation, a major supplier for the US military and aerospace industry. The attack was disclosed in an 8-K report to the US Securities and Exchange Commission (SEC). The intruders posed as potential business contacts and provided a fraudulent Microsoft login page. Employees unwittingly entered their credentials on the fake page, allowing the attackers to gain access to IEH's systems.
The threat actors gained access to sensitive defense-related communications, technical documentation, and potentially export-controlled information. They discovered and removed malicious mailbox rules that could have automatically forwarded incoming emails to an external inbox while deleting traces of their activity. This tactic would have enabled the attackers to continue receiving sensitive emails even after the initial breach was contained.
IEH Corporation did not report data exfiltration, but their security team identified the malicious mailbox rules and took corrective measures to mitigate the impact of the unauthorized access. The compromised inboxes belonged to various defense applications, including Apache AH-64, V-280 Valor, SH-60 Seahawk, Patriot, THAAD, AMRAAM, and APKWS missile programs. The company reported nearly $30 million in revenue for the 2026 fiscal year.
Written by urgent.news from TechRadar's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
