Utility know-how firm Itron, Inc. has disclosed that an unauthorized third social gathering accessed a few of its inside methods throughout a cyberattack.
The corporate states that it activated its cybersecurity response plan when detecting the exercise final month, notified legislation enforcement authorities, and engaged exterior advisors to assist the investigation and incident containment.
“On April 13, 2026, Itron, Inc. was notified that an unauthorized third social gathering had gained entry to sure of its methods,” the corporate says says in an 8-Ok submitting with the U.S. Securities and Trade Fee (SEC).
“The corporate activated its cybersecurity response plan and launched an investigation with the assist of exterior advisors to evaluate, mitigate, remediate, and comprise the unauthorized exercise.”
The unauthorized exercise has now been blocked, and the corporate said that it has noticed no follow-up exercise.
Itron is a Washington-based public firm that gives utility know-how services and products for power and water assets administration.
The corporate is listed on NASDAQ, employs roughly 5,600 individuals, and in 2025 reported income of $2.4 billion. It serves 7,700 prospects in 100 nations and manages 112 million endpoints.
Itron’s enterprise is interwoven with crucial infrastructure comparable to electrical energy grids, water distribution, and fuel networks.
Nevertheless, the corporate famous that on this case, enterprise operations recorded no materials disruption, and it doesn’t at present count on any subsequent impression. Additionally, it expects a good portion of incident-related prices to be coated by insurance coverage.
Itron has additionally famous that the unauthorized exercise didn’t prolong to prospects. Nevertheless, it’s essential to notice that the investigation into the incident’s scope and impression remains to be ongoing.
No ransomware group has claimed the assault on Itron. BleepingComputer contacted Itron with a request for extra particulars in regards to the assault and can replace this publish as soon as we hear again.
AI chained 4 zero-days into one exploit that bypassed each renderer and OS sandboxes. A wave of recent exploits is coming.
On the Autonomous Validation Summit (Could 12 & 14), see how autonomous, context-rich validation finds what’s exploitable, proves controls maintain, and closes the remediation loop.
Declare Your Spot
