Itron reports cyberattack
- Itron said an unauthorized third party accessed certain internal systems on April 13, prompting a cyber response, law-enforcement notice, and an ongoing investigation. - The company said customer-hosted systems showed no unauthorized activity, operations continued “in all material respects,” and insurers should reimburse a significant share of costs. - Itron serves 8,000-plus utilities and cities in 100-plus countries, widening concern over supplier risk. (itron.com)
Itron said an unauthorized third party gained access to certain of its systems on April 13, and the utility-technology company is still investigating. (sec.gov) The Liberty Lake, Washington, company said it activated its cybersecurity response plan, brought in external advisers, and proactively notified law enforcement. (sec.gov) Itron said it removed the unauthorized activity and has not observed any subsequent unauthorized activity inside its corporate systems. It also said it saw no unauthorized activity in the customer-hosted portion of its systems. (sec.gov) That distinction matters because Itron sells connected meters, network software, and monitoring tools used by utilities to manage electricity, gas, and water systems. The company says it serves customers in more than 100 countries. (itron.com 1) (itron.com 2) In its filing, Itron said operations have continued “in all material respects” because of contingency plans and data backup systems. It also said it expects insurers to reimburse a significant portion of direct incident costs. (sec.gov) The company did not say who was behind the intrusion, whether data was stolen, or whether ransomware was involved. TechCrunch reported Itron had not specified the type of cyberattack. (techcrunch.com) Itron said it is reviewing what legal filings and regulatory notifications may be required as the investigation continues. That leaves open the possibility of additional disclosures if the company confirms data exposure or reporting obligations. (sec.gov) The company’s scale gives the incident a wider footprint than a routine corporate network breach. Itron says more than 8,000 utilities and cities in over 100 countries use its technology to modernize critical infrastructure. (itron.com) For now, Itron’s public position is narrow: internal systems were accessed, customer-hosted systems showed no unauthorized activity, and core operations are still running. The next step is whether its continuing review produces breach notices, regulatory filings, or both. (sec.gov)
