Military device manufacturer discloses cyber incident to SEC
IEH Corporation, a military device manufacturer, suffered a cyberattack after an employee fell victim to a phishing scheme, gaining unauthorized access to their email account. The attackers accessed sensitive data including customer communications, engineering documents, and potentially export-controlled technical information. While no data was confirmed to have been exfiltrated, the incident highlights a significant risk for companies providing specialized components to the defense industry. The company is currently investigating and taking steps to secure its systems.
IEH Corporation, a manufacturer of specialized components for military equipment, disclosed a cyber incident to the U.S. Securities and Exchange Commission (SEC). The company revealed that an employee was targeted by a phishing attack, resulting in unauthorized access to their email inbox. This access granted the attackers the ability to view sensitive information contained within the employee’s account, including customer communications, purchase orders, and engineering-related documentation. Crucially, the company stated that while no data was confirmed to have been taken from the account, the attackers had access to potentially export-controlled technical information. The company is currently investigating the incident and taking measures to secure the affected mailbox and preserve any evidence. IEH Corporation produces specialized connectors used in military applications, including missile defense systems like THAAD and Patriot, and components for fighter jets utilized by various countries, including India. The company reported revenue of nearly $30 million in the 2026 fiscal year. As of Friday, the investigation remains ongoing, and the company asserts that the incident is not expected to impact its business operations.