A new Capgemini Research Institute report, Future encrypted: Why post-quantum cryptography tops the new cybersecurity agenda, highlights that the rapid progress of quantum computing threatens to render current encryption algorithms obsolete.
‘Harvest-now, decrypt-later’ attacks, together with tightening regulations and the evolving technology landscape, have elevated the importance of quantum safety. However, despite increasing awareness within the industry, many organizations still underestimate the risks surrounding quantum computing, which could lead to future data breaches and regulatory penalties.
According to the report, around two-thirds (65%) of organizations are concerned about the rise of ‘harvest-now, decrypt-later’ attacks. One in six early adopters believe that Q-day will be within five years, while around six in ten believe it will arrive within a decade.
While current quantum computers cannot yet break widely used encryption, high-risk industries such as defence and banking are leading the adoption of quantum-safe solutions. In contrast, consumer-focused sectors such as consumer products and retail are showing less urgency.
Quantum readiness isn’t about predicting a date — it’s about managing irreversible risk. Every encrypted asset today could become tomorrow’s breach if organizations delay adopting post-quantum protections. Transitioning early ensures business continuity, regulatory alignment, and long-term trust.
Marco Pereira, Global Head of Cybersecurity, Cloud Infrastructure Services at Capgemini
Post-quantum cryptography is the main current mitigation measure
Most organizations surveyed for the report (70%) are protecting their systems against emerging quantum threats by adopting the appropriate mix of post-quantum cryptographic (PQC) algorithms.
They view PQC as the best option to address near-term quantum security risks because it provides a comprehensive approach to securing data.
Nearly half of early adopters are already exploring, assessing feasibility, or piloting PQC solutions.
For 70% of organizations, regulatory mandates are a key driver behind the shift to PQC.
Methodology
The Capgemini Research Institute conducted a survey of 1,000 organizations with annual revenue of at least $1 billion across 13 sectors and 13 countries in Asia–Pacific, Europe, and North America. The global survey was carried out in April–May 2025. Around 70% of the sample in this report are referred to as ‘early adopters’. This segment is either working on or planning to work on quantum-safe solutions in the next five years. The survey findings were supplemented through in-depth interviews with sixteen industry executives.
