Congress orders federal task force to assess Chinese cyber threats to power grids, water systems, an

What it does

This bill creates a federal task force led by the Cybersecurity and Infrastructure Security Agency (CISA) to coordinate government efforts against Chinese state-sponsored cyber attacks on U.S. critical infrastructure, particularly those attributed to a group called Volt Typhoon. The task force will assess vulnerabilities, recommend resources and authorities needed, and report to Congress on sector-specific risks, economic impacts, and military implications—with findings published in unclassified summaries for public awareness.

Why we flagged it

The bill's core function is establishing an interagency task force to coordinate federal response to Chinese cyber threats against critical infrastructure and produce classified and unclassified reports to Congress and the public. It is a governance and transparency mechanism, not a regulatory or appropriations measure.

What the text implies

• Task force termination is automatic 60 days after final briefing, creating a sunset mechanism that may limit long-term institutional coordination unless Congress reauthorizes.
• Unclassified executive summaries will be published publicly, potentially signaling U.S. threat assessments and defensive posture to adversaries, though this is likely intentional for deterrence and public awareness.
• The bill does not mandate new funding or authorities—it only requires assessment of what resources and authorities are needed, deferring actual resource allocation to future appropriations or legislative action.
• Exemptions from the Federal Advisory Committee Act (FACA) and Paperwork Reduction Act reduce transparency and public input mechanisms that would normally apply to federal task forces.

Who it affects

Ordinary citizens depend on critical infrastructure (power grids, water systems, transportation, communications) for daily life and safety. This bill creates transparency mechanisms (public reports, congressional briefings) and coordination to detect and counter foreign cyber threats to those systems. The public gains visibility into vulnerabilities and federal response capacity without bearing direct costs.

Who stands to gain

• cybersecurity software and services vendors
• critical infrastructure operators (utilities, telecommunications, transportation)
• defense contractors with cyber capabilities

Named in the bill

Cybersecurity and Infrastructure Security Agency (CISA), Department of Homeland Security (DHS), Federal Bureau of Investigation (FBI), Attorney General, Volt Typhoon, People's Republic of China, National Security Memorandum–22, Critical Infrastructure Protection Act of 2001, Homeland Security Act of 2002, National Security Act of 1947

Where it stands

1 cosponsor: 1 Democrats.

• May 19, 2026 — Introduced · Congress.gov: “Introduced in Senate”
• May 19, 2026 — Referred to Senate Committee on Homeland Security and Governmental Affairs · Congress.gov: “Read twice and referred to the Committee on Homeland Security and Governmental Affairs”

Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.

Money around this bill

1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $240,000 in lobbying spend. A filing names 99 bills on average, so that figure is what each filing reported, not a share belonging to this bill.

More lobbying clients named this bill than 0% of bills with at least one filing.

Rick Scott, the sponsor, reported $69,750 in PAC receipts in the 2026 cycle.

• Fdd Action — $240,000 on 1 filing

Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.