Get started free →
HR 7266 119th Congress · House

House Advances Rural Utility Cybersecurity Funding Bill

Advocate

Official title: Rural and Municipal Utility Cybersecurity Act

The Rural and Municipal Utility Cybersecurity Act would reauthorize the Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program, which helps smaller electric utilities protect their systems from cyberattacks. It would let the Secretary of Energy provide technical assistance and award grants, cooperative agreements, and prizes to eligible utilities, including rural electric cooperatives, municipally owned utilities, certain not-for-profit partners, and some small investor-owned utilities. The bill authorizes $250 million for fiscal years 2026 through 2030. It also gives priority to applicants with limited cybersecurity resources, utilities tied to bulk-power system reliability, and operators of defense critical electric infrastructure.

  • Authorizes $250 million for fiscal years 2026 through 2030.
  • Lets DOE provide technical assistance plus grants, cooperative agreements, and prizes.
  • Targets rural electric cooperatives, municipal utilities, and certain small investor-owned utilities.
  • Gives priority to entities with limited cybersecurity resources or critical infrastructure roles.
  • Protects information shared under the program from FOIA and similar public disclosure laws.
Public Relevance 28 / 100
Niche Modest scope Broad

If you are part of a rural electric cooperative, a municipal utility, a small investor-owned utility under the bill’s threshold of less than 4,000,000 megawatt hours sold per year, or a partner nonprofit working with at least six eligible utilities, this bill could bring new federal help for cyber defenses. The practical benefit would be access to DOE technical assistance and competitive or noncompetitive funding, with priority for entities with limited cybersecurity resources or facilities tied to bulk-power reliability or defense critical electric infrastructure. For ordinary customers served by those utilities, the effect would be indirect but potentially meaningful if the program helps prevent outages, ransomware, or recovery costs.

See how this bill affects you — sign in for a personalized analysis
April 14, 2026
Fiscal Impact

As ordered reported by the House Committee on Energy and Commerce on March 5, 2026

Full CBO report →
FOR
  • Rural electric cooperatives These utilities often serve large geographic areas with limited staff and thin budgets, so federal help can make the difference between basic cyber readiness and serious exposure. A targeted grant-and-technical-assistance program lets them improve security without having to build everything alone.
  • Municipal utility managers City-owned utilities may not have the same cybersecurity budgets as large investor-owned firms, even though they are responsible for keeping power reliable for local residents and businesses. The bill’s competitive and noncompetitive awards, plus technical assistance, give them practical tools rather than just mandates.
  • Cybersecurity vendors and consultants serving utilities A dedicated federal program can spur utilities to adopt advanced cybersecurity technologies, which could increase demand for specialized monitoring, hardware, software, and response services. The program’s emphasis on threat sharing could also improve sector-wide readiness.
AGAINST
  • Taxpayer budget watchdogs The bill authorizes $250 million over five fiscal years, and critics may argue that federal cybersecurity spending should be more tightly constrained or tied to stronger performance requirements. They may also question whether grants and prizes will be distributed efficiently enough to justify the expense.
  • Transparency and open-government advocates Section (e) exempts information shared under the program from FOIA and similar state, tribal, and local disclosure laws. Opponents may worry that broad confidentiality could reduce public oversight of how utilities and governments use cyber funds and what risks are being reported.
  • Some larger utility customers or market participants Because the program prioritizes entities with limited cybersecurity resources and certain critical infrastructure roles, some stakeholders may argue the bill favors a subset of utilities over broader grid-wide investments. They could prefer more uniform standards or wider eligibility across the sector.
  • “The Secretary shall maintain a program... to provide technical assistance and award funding”

    This creates a continuing federal support mechanism rather than a one-time grant round. For eligible utilities, it means help can come as hands-on assistance as well as money, which may be important when local staff lack cybersecurity expertise.

  • “including grants, cooperative agreements, and prizes”

    The program is flexible about how support is delivered. That gives DOE room to fund different kinds of cybersecurity projects, from straightforward grants to incentive-based prizes for effective solutions.

  • “priority to an eligible entity that... has limited cybersecurity resources”

    The bill is not trying to spread funds evenly across all utilities. It steers assistance toward the smallest or least-resourced systems, which means bigger utilities in the eligible group may not be first in line.

  • “information... shall be deemed voluntarily shared information and exempt from disclosure”

    Utilities and governments can share threat information without it being released under public records laws. That may encourage candid reporting of vulnerabilities, but it also reduces public access to information about program operations and cyber incidents.

  • “$250,000,000 for the period of fiscal years 2026 through 2030”

    This is the bill’s main funding commitment. It sets the scale of federal support available for cybersecurity projects and technical assistance over five years.

BillBoard checks this page against public Congress.gov metadata, then adds plain-English analysis where available.

Bill
HR 7266
Congress
119th Congress
Official title
Rural and Municipal Utility Cybersecurity Act
Policy area
Technology
Latest action
Motion to reconsider laid on the table Agreed to without objection. (June 29, 2026)
Last updated
June 30, 2026

June 29, 2026

Motion to reconsider laid on the table Agreed to without objection.

Take Action

Get more from BillBoard

Free tools to understand, respond to, and track this bill.

Ask AI about this bill

Data sourced from api.congress.gov.

Free to use · No credit card

Understand every bill.
Make your voice count.

BillBoard turns dense U.S. legislation into plain-English summaries, helps you take a stance, and connects you to your representatives — in seconds.