Federal cybersecurity grants shore up rural power grids against digital attacks
S. 5360 — Rural and Municipal Utility Cybersecurity Act · Filed by Dave McCormick (R-PA) · 5 cosponsors · Introduced Aug 7, 2026 · Reported out
Your members of Congress
Enter a ZIP to see where your representative and both senators stood on this bill.
Looked up on this device — your ZIP is never stored on our servers.
What it does
This bill reauthorizes and expands a federal grant program that provides money and technical help to rural electric cooperatives, municipal utilities, and smaller investor-owned utilities to upgrade their cybersecurity defenses against digital attacks. The program awards grants, cooperative agreements, and prizes to eligible utilities to deploy advanced security technology and participate in threat-sharing networks, with $250 million authorized over five years (2027–2031).
Why we flagged it
The bill's operative mechanism is straightforward: it authorizes federal grants and technical assistance to rural and municipal electric utilities for cybersecurity upgrades. This is a public-safety and infrastructure-resilience measure, not a tax carve-out, deregulation, or private subsidy.
What the text implies
- The FOIA exemption for 'voluntarily shared' cybersecurity threat information may reduce public visibility into which utilities are vulnerable and how federal funds are deployed, though this is standard practice in critical infrastructure protection.
- Smaller investor-owned utilities (under 4 million MWh/year) are eligible alongside public utilities, creating a mixed-beneficiary pool; private utilities may capture grant funding intended to serve public-interest infrastructure.
- The bill does not specify how 'advanced cybersecurity technology' is defined operationally, leaving room for vendors and contractors to shape what counts as eligible—potential for vendor capture in implementation.
- Priority funding for utilities with 'limited cybersecurity resources' may concentrate federal dollars in the most vulnerable systems, which is sound policy, but also means less-resourced utilities may become dependent on federal support for ongoing operations.
Section numbers refer to the bill text the analysis read — linked under Primary records below.
Who it affects
The bill funds critical infrastructure protection that directly serves public safety and grid reliability—ordinary citizens depend on uninterrupted electricity. Rural and municipal utilities, which serve millions of Americans, often lack resources to defend against sophisticated cyberattacks; this program closes that gap. The FOIA exemption for shared threat information is a standard protective measure in cybersecurity law and does not materially harm public accountability.
Who stands to gain
- cybersecurity software and hardware vendors
- managed security service providers
- rural electric cooperatives
- municipal utilities
- smaller investor-owned electric utilities
Named in the bill
Department of Energy (Secretary), Rural electric cooperatives, Municipal utilities, Investor-owned electric utilities, Federal Power Act (section 215, 215A), Homeland Security Act of 2002 (section 2200), Infrastructure Investment and Jobs Act (section 40124), FOIA (5 U.S.C. § 552)
Where it stands
5 cosponsors: 3 Republicans, 2 Democrats.
- Aug 7, 2026 — Introduced · Congress.gov: “Introduced in Senate”
- Aug 7, 2026 — Referred to Senate Committee on Energy and Natural Resources · Congress.gov: “Read twice and referred to the Committee on Energy and Natural Resources”
- Sep 16, 2026 — Hearing held · Congress.gov: “Committee on Energy and Natural Resources. Hearings held”
- Sep 30, 2026 — Reported out of committee · Congress.gov: “Committee on Energy and Natural Resources. Ordered to be reported without amendment favorably”
Dates and quoted wording are Congress.gov's action record; the timeline shows status changes, not every procedural step.
Money around this bill
1 lobbying clients named this bill on 1 disclosure filings across 1 quarter, Jun 2026 to Jun 2026. Those filings disclosed $1,390,000 in lobbying spend. A filing names 44 bills on average, so that figure is what each filing reported, not a share belonging to this bill.
More lobbying clients named this bill than 0% of bills with at least one filing.
Dave McCormick, the sponsor, reported $690,750 in PAC receipts in the 2026 cycle.
- Entertainment Software Association — $1,390,000 on 1 filing
Lobbying Disclosure Act filings through Jul 20, 2026. A filing shows who paid to lobby on a bill it names, not what changed.
How this was measured
Analysis — Quorum's AI read the bill text published by Congress.gov (4,289 characters) on Aug 16, 2026. Section numbers in the findings refer to that text, linked below; transparency and hidden-provision scores are compared against the median of 16,222 analysed bills.
Status and sponsors — Congress.gov's bill record — actions, committee referrals and cosponsors — loaded nightly. The timeline shows status changes, not every procedural action.
Money — Senate Lobbying Disclosure Act filings whose specific-issue field names this bill for quarters ending Jun 2026 to Jun 2026. A filing's amount is reported whole beside the median number of bills a filing names; it is never divided across them. PAC receipts are FEC-reported contributions to the sponsor's candidate committee in the 2026 cycle.
As of — lobbying records through Jul 20, 2026 · page rendered 2026-10-20.
“Federal cybersecurity grants shore up rural power grids against digital attacks” QuorumCivic. https://share.quorumcivic.app/bill/119/s5360 Report an error
The week in bills
One email, Sunday: what Congress passed, what it changed, and who paid.
One link arrives to confirm the address. It is used for this email and nothing else, and every issue carries an unsubscribe link.