Federal grants target cybersecurity gaps at smaller electric utilities

What does this do?

HR 7266 renews and updates a federal grant program run by the Department of Energy that supports cybersecurity improvements at smaller electric utilities. The program can provide grants, prizes, and technical assistance to help these utilities buy better security technology, defend against cyberattacks, and share threat information with other utilities and the government. Information that participating utilities share with the government is kept confidential and cannot be released under the Freedom of Information Act or similar state public-records laws.

Who does it affect?

Eligible recipients include rural electric cooperatives, city- and county-owned utilities, and smaller investor-owned utilities that sell less than 4 million megawatt-hours of electricity per year. Priority goes to utilities with especially limited cybersecurity budgets or those that supply power to military or critical defense facilities.

Why does it matter?

Smaller and local power providers typically have fewer resources to protect themselves from cyber threats than large private companies do. The confidentiality provision is intended to encourage utilities to share details about vulnerabilities or attacks without concern that sensitive information could become public.

What does it cost, and who pays?

• Up to $250M authorized
• Covers fiscal years 2026–2030
• Administered by DOE