Itron detects unauthorised April 2026 breach, says impact minimal

Itron, a US-based energy and water management solutions provider serving utilities and cities, said it detected unauthorized access to some of its systems on 13 April 2026, with operations continuing in all material respects. The firm noted in an SEC filing that it has remediated the unauthorized activity and has not observed any subsequent intrusions within its corporate systems, nor in the customer hosted portion.

The attacker’s motivation and whether any customer or sensitive information may have been compromised remain unclear, and no known ransomware or extortion group appears to have taken credit for the hack. The company expects a significant portion of incident response costs to be covered by insurance and does not anticipate a material impact from the incident, though it is evaluating potential legal filings and regulatory notifications as appropriate, according to Itron. Written by Eduard Kovacs for SecurityWeek, the report outlines ongoing investigations into this incident.