RMU Cybersecurity Act (H.R. 7266)

Summary

Continues a program giving money and technical help to small electric utilities to protect their computer systems from cyberattacks and share threat information.

What problem does this solve?

Small, rural, and city-owned electric utilities often lack the money and experts to defend against modern cyberattacks, making parts of the nation's power grid weak. This bill provides federal grants and technical help to these smaller utilities, allowing them to buy better security tools and protect their systems.

What does this bill do?

Reauthorizes cybersecurity grant program

Continues the Rural and Municipal Utility Advanced Cybersecurity Grant and Technical Assistance Program to help small and city-owned electric utilities improve their cybersecurity.

Authorizes $250 million in funding

Sets aside $250 million for the program for the five-year period from fiscal year 2026 through 2030.

Defines eligible utilities

Specifies that rural electric cooperatives, city-owned utilities, and small investor-owned utilities selling less than 4 million megawatt-hours per year can receive aid.

Prioritizes aid for critical utilities

Gives priority for grants and assistance to utilities with limited cybersecurity resources or those that are critical to the main power grid or national defense.

Protects shared information from public disclosure

Makes information shared under the program exempt from public records requests, like the Freedom of Information Act, to encourage open sharing of security threats.

Who does this affect?

Rural electric cooperatives
Municipally owned electric utilities
Small investor-owned electric utilities

What is the real world impact?

•

Strengthens the national power grid

Helps small, often overlooked utility companies improve their defenses against cyberattacks, which makes the entire electric system safer and more reliable for everyone.

•

Protects sensitive security information

Exempts information shared in the program from public disclosure laws. This encourages utilities to share threat data without fear of it being made public, but it also reduces transparency about grid weaknesses.

When does this start?

The program's funding is authorized to be available from fiscal year 2026 through 2030.