Itron details contained cybersecurity incident

Rhea-AI Filing Summary

FAQ

Filing Exhibits & Attachments

8-K Event Classification

Key Figures

Key Terms

What cybersecurity incident did Itron (ITRI) disclose in this 8-K?

Did the Itron (ITRI) cyber incident disrupt company operations?

Were Itron (ITRI) customer-hosted systems affected by the incident?

How does Itron (ITRI) expect insurance to affect cyber incident costs?

Does Itron (ITRI) consider the cyber incident to be material?

What future legal or regulatory steps might Itron (ITRI) take?

Itron, Inc. reported that on April 13, 2026 an unauthorized third party gained access to certain company systems.

(High)

(Neutral)How Sentiment works

Sentiment and the balance of points

Rhea-AI Sentiment reads the wording of the document, how positive or negative its language is on a 1 to 5 scale. The balance of points shown with the takes weighs what the document actually discloses, so the two can disagree, for example when a trial that missed its main goal is described in upbeat language.

How Sentiment works How the balance works

Form Type

8-K

Itron, Inc. reported that on April 13, 2026 an unauthorized third party gained access to certain company systems. Itron activated its cybersecurity response plan, engaged external advisors, notified law enforcement, and undertook remediation efforts.

The company states it has removed the unauthorized activity, seen no further unauthorized access within its corporate systems, and observed no unauthorized activity in customer-hosted systems. Operations have continued in all material respects, supported by contingency and data backup plans. Itron currently expects a significant portion of direct incident-related costs to be reimbursed by insurance and does not currently believe the incident has had or is reasonably likely to have a material impact.

Item 8.01 — Other Events

1 item

Item 8.01 Other Events Other

Voluntary disclosure of events the company deems important to shareholders but not covered by other items.

Incident date: April 13, 2026

1 metrics

Incident date April 13, 2026 Date Itron was notified of unauthorized system access

cybersecurity response plan, unauthorized third party, forward-looking statements, Private Securities Litigation Reform Act of 1995, +1 more

5 terms

cybersecurity response plan technical

"The Company activated its cybersecurity response plan and launched an investigation"

unauthorized third party technical

"an unauthorized third party had gained access to certain of its systems"

forward-looking statements regulatory

"This Form 8-K contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995"

Forward-looking statements are predictions or plans that companies share about what they expect to happen in the future, like estimating sales or profits. They matter because they help investors understand a company's outlook, but since they are based on guesses and assumptions, they can sometimes be wrong.

Private Securities Litigation Reform Act of 1995 regulatory

"forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995"

Risk Factors regulatory

"other risks listed described in Part I, Item 1A: Risk Factors included in our Annual Report on Form 10-K"

Risk factors are elements or conditions that could cause an investment's value to decrease or lead to potential losses. They are like warning signs or obstacles that can affect the success of an investment, making it uncertain or more unpredictable. Recognizing risk factors helps investors understand the possible challenges and make more informed decisions.

AI-generated questions and answers. How Rhea-AI works. Not financial advice.

Itron disclosed that an unauthorized third party accessed certain company systems on April 13, 2026. The company activated its cybersecurity response plan, engaged external advisors, notified law enforcement, and began containment, mitigation, and remediation efforts to address and investigate the incident.

Itron states its operations have continued in all material respects following the incident. Contingency plans and data backup systems supported ongoing operations while the company investigated, mitigated, and remediated the unauthorized activity in its systems.

Itron reports that no unauthorized activity was observed in the customer-hosted portion of its systems. The unauthorized access was detected in certain corporate systems, and the company states it has not seen any subsequent unauthorized activity there after remediation.

Itron currently expects that a significant portion of its direct costs relating to the cybersecurity incident will be reimbursed by its insurers. This expectation helps reduce the potential financial impact from investigation, mitigation, and remediation activities associated with the event.

Itron states it does not currently believe the incident has had or is reasonably likely to have a material impact on the company. This view may evolve as the investigation continues and additional information about scope and consequences becomes available.

Itron is evaluating what legal filings and regulatory notifications may be required because of the incident. The company intends to take appropriate action based on its ongoing investigation, review of the incident’s scope, and applicable regulatory requirements in relevant jurisdictions.

AI-generated analysis. How Rhea-AI works. Not financial advice.

Understanding 8-K Material Events →

See more from StockTitan in Google Search and AI answers. Adds StockTitan as a preferred source · opens Google

Add on Google

Accepted by SEC EDGAR 04/24/2026 - 08:30 AM EDT

UNITED STATES

SECURITIES AND EXCHANGE COMMISSION

Washington, D.C. 20549

FORM 8-K

CURRENT REPORT

Pursuant to Section 13 or 15(d)

of the Securities Exchange Act of 1934

April 13, 2026

Date of Report (Date of earliest event reported)

ITRON, INC.

(Exact name of registrant as specified in its charter)

Washington

000-22418

91-1011792

(State or other jurisdiction

of incorporation)

(Commission

File Number)

(IRS Employer

Identification No.)

2111 N. Molter Road, Liberty Lake, WA 99019

(Address of principal executive offices, Zip Code)

(509) 924-9900

(Registrant’s telephone number, including area code)

(Former name or former address, if changed since last report)

Check the appropriate box below if the Form 8-K filing is intended to simultaneously satisfy the filing obligation of the registrant under any of the following provisions:

☐	Written communications pursuant to Rule 425 under Securities Act (17 CFR 230.425)

☐	Soliciting material pursuant to Rule 14a-12 under the Exchange Act (17 CFR 240.14a-12)

☐	Pre-commencement communications pursuant to Rule 14d-2(b) under the Exchange Act (17 CFR 240.14d-2(b))

☐	Pre-commencement communications pursuant to Rule 13e-4(c) under the Exchange Act (17 CFR 240.13e-4(c))

Securities registered pursuant to Section 12(b) of the Act:

Title of each class

Trading

Symbol(s)

Name of each exchange

on which registered

Common stock, no par value

ITRI

NASDAQ Global Select Market

Indicate by check mark whether the registrant is an emerging growth company as defined in Rule 405 of the Securities Act of 1933 (§230.405 of this chapter) or Rule 12b-2 of the Securities Exchange Act of 1934 (§240.12b-2 of this chapter).

Emerging growth company ☐

If an emerging growth company, indicate by check mark if the registrant has elected not to use the extended transition period for complying with any new or revised financial accounting standards provided pursuant to Section 13(a) of the Exchange Act. ☐

Item 8.01

Other Events.

On April 13, 2026, Itron, Inc. (the “Company” or “Itron”) was notified that an unauthorized third party had gained access to certain of its systems.

The Company activated its cybersecurity response plan and launched an investigation with the support of external advisors to assess, mitigate, remediate, and contain the unauthorized activity. The Company’s response efforts included proactively notifying law enforcement.

The Company took action to remediate and remove the unauthorized activity and has not observed any subsequent unauthorized activity within its corporate systems. Further, no unauthorized activity was observed in the customer hosted portion of its systems.

As a result of the Company’s contingency plans and data backup systems, the Company’s operations have continued in all material respects. In addition, Itron currently expects that a significant portion of its direct costs incurred relating to the incident will be reimbursed by its insurers.

The Company is evaluating what legal filings and regulatory notifications might be required because of this incident and intends to take appropriate action based on its review and findings.

While the Company’s investigation and assessment of this incident is ongoing, the Company does not currently believe the incident has had or is reasonably likely to have a material impact on the Company.

Certain Forward-Looking Statements

This Form 8-K contains forward-looking statements within the meaning of the Private Securities Litigation Reform Act of 1995, including statements regarding the Company’s current beliefs, understanding and expectations regarding the incident and its remediation and investigation. Factors that could cause actual results to differ materially from those indicated in the forward-looking statements include, but are not limited to, the results of the Company’s analysis of the scope and details of the incident and the discovery of new or additional information; the success of the Company’s containment, mitigation and remediation efforts; the unauthorized release of any of the Company’s data, including third party data held by the Company, or the use of any such data for any fraudulent purposes; potential loss or destruction of Company data or adverse impacts to the Company’s operations; any potential adverse impact of the incident on the Company’s results of operations and financial condition; diversion of management’s attention from operations of the Company to addressing the incident; potential investigations, litigation, fines, costs and losses related to the incident and its remediation; potential adverse effects on relationships with customers, suppliers and other third parties as a result of the incident; reputational risk related to the incident; regulatory scrutiny of the incident; risks related to the availability of the Company’s insurance coverage; and other risks listed described in Part I, Item 1A: Risk Factors included in our Annual Report on Form 10-K for the year ended December 31, 2025 and other reports on file with the Securities and Exchange Commission.

SIGNATURE

Pursuant to the requirements of the Securities Exchange Act of 1934, the registrant has duly caused this report to be signed on its behalf by the undersigned hereunto duly authorized.

Source: View Original Filing on SEC EDGAR

ITRON, INC.

/s/ JOAN S. HOOPER

Dated: April 24, 2026

Joan S. Hooper

Senior Vice President & Chief Financial Officer

3 documents