Quantum Computing Now Considered a Top Cybersecurity Risk, Says Capgemini

A new report by the Capgemini Research Institute titled "Future encrypted: Why post-quantum cryptography tops the new cybersecurity agenda" warns that the rapid progress of quantum computing could render current encryption algorithms obsolete. The emergence of "harvest-now, decrypt-later" threats, evolving regulations, and a shifting technology landscape have elevated quantum safety to the top of enterprise cybersecurity priorities.

Yet, despite rising awareness, many organisations continue to underestimate the risks, potentially exposing themselves to future data breaches and regulatory penalties.

Quantum Urgency and Early Adopter Perspectives

According to the report, nearly two-thirds (65%) of organisations are concerned about the rise of "harvest-now, decrypt-later" attacks. One in six early adopters believes "Q-day"—the point at which quantum computers can break current cryptographic algorithms—will occur within five years, while around 60% expect it within a decade.

“Quantum readiness isn’t about predicting a date—it’s about managing irreversible risk. Every encrypted asset today could become tomorrow’s breach if organisations delay adopting post-quantum protections,” said Marco Pereira, Global Head of Cybersecurity, Cloud Infrastructure Services, Capgemini. “Quantum safety is not a discretionary spend but a strategic investment. Early adopters will best insulate themselves against future cyberattacks.”

Currently, industries like defence and banking are leading in the adoption of quantum-safe solutions, while sectors like consumer products and retail are showing less urgency despite the growing threat.

PQC Emerges as the Preferred Quantum Defence

The report highlights that 70% of organisations are pursuing post-quantum cryptography (PQC) as the preferred method to defend against quantum threats. PQC offers a comprehensive and practical solution to safeguard data, especially in the near term.

Almost half of early adopters are actively exploring or piloting PQC solutions, with regulatory compliance driving adoption for 70% of respondents. However, 30% of organisations are still ignoring the quantum threat, often due to limited budgets or lack of internal expertise to support cryptographic migration.

Report Methodology

The Capgemini Research Institute surveyed 1,000 organisations with annual revenues exceeding $1 billion across 13 sectors and 13 countries in Asia–Pacific, Europe, and North America. Conducted in April–May 2025, the study included in-depth interviews with 16 industry executives. Around 70% of participants are classified as early adopters, actively working on or planning to adopt quantum-safe solutions within five years.