IEH Phishing Breach Hits Microsoft 365 Mailboxes

IEH Corporation disclosed a phishing breach where an attacker impersonated a prospective business contact and stole an employee's Microsoft 365 credentials. The intruder accessed emails, attachments, purchase orders, and potentially export-controlled technical data. IEH found no evidence of exfiltration and removed malicious mailbox rules.