U.S.-based energy and water management solutions provider Itron has disclosed a cybersecurity incident after hackers gained unauthorized access to parts of its internal systems, prompting an ongoing investigation.
The company detected the intrusion on April 13, 2026, and immediately activated its incident response plan to contain and remediate the threat. According to its regulatory filing, Itron took steps to remove the unauthorized activity and has not observed any further suspicious access within its corporate systems since then.
Importantly, Itron stated that its operations have continued without significant disruption and that no unauthorized activity was detected in customer-hosted systems, indicating that critical infrastructure services remained largely unaffected.
The company, which serves more than 8,000 utilities and cities across over 100 countries, plays a key role in managing energy, water, and smart city infrastructure, making the incident notable given its connection to critical services.
At this stage, the exact scope of the breach—including whether any sensitive data was accessed—remains unclear, and no ransomware or threat group has claimed responsibility for the attack.
Itron has indicated that it expects a significant portion of incident-related costs to be covered by insurance and does not currently anticipate a material impact on its business. However, the company is continuing its investigation and evaluating any necessary regulatory disclosures or legal actions.
The incident highlights the ongoing cybersecurity risks facing organizations linked to critical infrastructure, where even limited breaches can raise concerns due to the potential downstream impact on essential services.
