The foundations of digital security, from online banking to messaging apps, cryptocurrency, and critical infrastructure, rely on cryptographic keys—complex strings of characters that are nearly impossible to decipher using classical computers. These keys depend on factorization: the decomposition of large numbers into products of primes. For decades, this system has protected the world’s information networks. But as far back as 1994, mathematician Peter Shor at MIT demonstrated that quantum computers could efficiently solve the factorization problem, rendering existing cryptography vulnerable. Today, that theoretical risk is becoming a tangible reality.
“By the end of this decade, a cryptographically relevant quantum computer will be able to break the encryption that underpins our global economy,” warned Anand Oswal, executive vice president of Palo Alto Networks, the world’s largest cybersecurity provider. His company is among those urging immediate preparation for the post-quantum era. Nikesh Arora, CEO of Palo Alto and host of the Quantum-Safe Summit, emphasized that the window for action is narrow: “It’s at that tipping point: it’s no longer in the labs, it’s no longer a scientific project; we’re starting to see green shoots and companies that claim to have found a way to perform a stable content computing task.”
One alarming practice highlighted by cybersecurity experts is “harvest now, decrypt later.” Cybercriminals collect sensitive information today with the expectation that future quantum computers will enable them to decrypt it. While some data may expire or lose relevance in a few years, highly sensitive information—including government secrets or proprietary corporate data—could be exposed once quantum technology reaches the necessary capability. “We can’t wait until then to act. We must be secure today,” Arora said.
IBM, a leader in quantum computing, is advancing rapidly toward that capability. Jerry Chow, head of IBM’s Experimental Quantum Computing group, confirmed that the company is on track to deliver fault-tolerant quantum computers with 200 qubits, systems capable of tackling calculations impossible for classical computers and able to challenge today’s cryptography. “At some point it’s going to happen, and I think the key is to be ahead of it, yes, to prepare for it now,” Chow said.
John Martinis, a Nobel laureate in Physics in 2025 and a keynote guest at the Quantum-Safe Summit, echoed the urgency while offering cautious optimism. “I think people need to start worrying a bit. You have time to do this properly, but you don’t have an infinite amount of time. I wouldn’t want quantum computing to be known for breaking the internet. We need to think seriously about replacing our systems.”
Government agencies and multinational corporations have been preparing for a post-quantum world for years. But smaller businesses and suppliers remain at risk. Colin Soutar, director of risk advisory at Deloitte, stressed that early action is critical. “If you start early, you can see where the vulnerabilities are and begin integrating the alternatives into the planned enterprise upgrades that are already being done. It’s about reinventing the underlying systems, and that involves a lot of work.”
Soutar outlined a stepwise approach: establish infrastructure, identify weaknesses, and begin iterative upgrades. NIST mathematician Dustin Moody added that flexibility is essential, as new quantum or AI technologies may emerge unexpectedly. “We can never have 100% security. Someone can come up with a new idea, a quantum computer, or an AI that represents a new approach we’ve never considered, and that’s always possible,” he said. He advised creating a dedicated management team to inventory cryptographic systems, assess lifespans, coordinate with suppliers, and ensure consistent implementation across networks.
Michael Duffy, U.S. Federal Director of Information Security, emphasized that organizations must move beyond planning into immediate action. “Basically, start that process now and don’t wait because it’s going to be a long and complex transition. We must make sure we take immediate action, move beyond the brainstorming phase, move quickly, think about where to start, and simply begin. Today we’re talking about taking action.”
The message from the quantum and cybersecurity communities is clear: the dawn of quantum computing promises revolutionary advances but also threatens to render today’s digital security obsolete. Without swift, coordinated action, the backbone of the internet and global commerce may face unprecedented vulnerability, potentially enabling cyberattacks that could compromise financial systems, critical infrastructure, and sensitive personal data. Leaders, companies, and governments are being urged to act now, before the tipping point becomes a breach.
