Thales has published findings from its 2025 Data Threat Report, highlighting what it says is an urgent need for organizations to prepare for the post-quantum era. The annual report, based on a global survey of over 3,100 IT and security professionals across 20 countries and 15 industries, highlights the latest data security threats, trends, and emerging topics.
Post-quantum readiness
While 60% of organizations are already prototyping or evaluating quantum-resistant encryption, the report emphasises that this is a highly complex and urgent transition, one that must begin now to protect today’s sensitive data from tomorrow’s quantum decryption threats.
In addition to prototyping, half (50%) of respondents are actively assessing their current encryption strategies, with top priorities including evaluating PQC algorithms, improving cryptographic agility, and developing comprehensive encryption strategies to strengthen post-quantum defences.
Thales found that one in three organizations plan to rely on cloud or telecoms providers to implement post-quantum encryption. Although this may offer short-term ease, it risks contributing to a fragmented and inconsistent encryption landscape.
57% of enterprises already manage five or more key management systems, and adding more layers could significantly increase the risk of misconfigurations, operational errors, and potential data exposure.
Concern is growing over quantum computing threats
Concern over quantum computing threats has steadily grown since 2021, evolving from general unease to more specific and technical fears:
- In 2021, 47% of organizations said they were ‘very concerned’ about quantum risks, with another 38% ‘somewhat concerned’.
- By 2022, these concerns became more focused, with 58% worried about network decryption, and 52% about the future decryption of today’s data.
- In 2023, those numbers rose to 62% and 55%, respectively, showing a deepening awareness of quantum threats.
- In 2024, the spotlight shifted to future encryption compromise (68%) and key distribution vulnerabilities (63%) – highlighting fears that quantum computers could break encryption or disrupt secure communications.
- By 2025, these remained the top concerns: 63% cited future encryption compromise, 61% key distribution, and 58% still feared the future decryption of today’s data.
This progression shows a clear trend: many organizations are not only more aware of quantum threats but are also increasingly focused on the specific ways quantum computing could undermine data security. What is now needed is for the 40% who have taken no steps towards preparing to start to do so.
The clock is ticking on post-quantum readiness, and quantum threats are no longer theoretical, they’re rapidly becoming a real-world challenge for security teams. While it’s promising to see three out of five organizations beginning their post-quantum journeys, fragmented strategies and overreliance on third parties risk leaving critical data exposed. True quantum readiness demands cohesive strategies, cryptographic agility, and urgent action to safeguard today’s data against tomorrow’s quantum capabilities.
Chris Harris, EMEA Technical Director, Thales
