Back in August, Sen McCormick (R,PA) introduced S 5360, the Rural and Municipal Utility Cybersecurity Act. The bill would rewrite 42 USC 18723, the Rural and municipal utility advanced cybersecurity grant and technical assistance program, to update and reauthorize that program. The existing $250 million annual authorization for the program would be extended through 2030.
This bill is practically the same at HR 7266, that was introduced in January 2026 by Rep Miller-Meeks (R,IA), the bill was marked up by the Subcommittee on Energy of the House Energy and Commerce Committee in February; a minor amendment was adopted by a voice vote and the bill was favorably recommended to the full Committee by a voice vote. The bill was taken up by the full Committee on March 5th, 2026, and passed by a vote of 49 to 0. The full House considered HR 7266 on June 29th, under the suspension of the rules process. The bill was passed by a voice vote. No action has been taken on the bill in the Senate.
Moving Forward
While the Senate is free to consider both bills, it is unlikely to take up either under regular order as it is just too time consuming, and the bills are just not politically important enough, especially considering the limited time available after next month’s elections are over. Given the broad bipartisan support that HR 7266 saw in the House and the support S 5360 saw in Committee, either of these bills could possibly be successfully passed using the Senate’s unanimous consent process.
For more information on the provisions of this bill, including the differences between it and HR 7266, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/s-5360-introduced-utility-cybersecurity - subscription required.