G7 urges organizations to prepare for quantum cyber threats

Several of the world’s most powerful democracies are urging governments and companies to start preparing their systems for a future in which quantum computers could break widely-used forms of encryption.

In a joint advisory released Thursday, the G7 Cyber Security Working Group and the U.S. Cybersecurity and Infrastructure Security Agency, CISA, said organizations should begin moving to post-quantum cryptography now, rather than waiting until sufficiently powerful quantum computers become available.

“Although the exact timeline is uncertain, several recent advances suggest an anticipation of the development of quantum computers,” the advisory said.

Post-quantum cryptography is a type of encryption designed to protect data from attacks by both traditional and quantum computers. According to the G7 and CISA, organizations may already be exposed to the threat.

Hackers can steal encrypted information and store it in the hope of decrypting it once more powerful quantum computers become available, an approach commonly known as “harvest now, decrypt later.” The threat is particularly relevant for information that needs to remain secret for many years, including government records, sensitive personal information and corporate trade secrets.

“This means that organizations may already be exposed to the threat today,” the advisory said.

Attackers equipped with quantum technology could potentially impersonate trusted entities, forge data, compromise equipment or gain access to confidential information, according to the advisory.

The G7 and CISA said governments and companies should start by identifying systems containing their most sensitive information and critical assets and prioritizing them for migration.

They also recommended incorporating quantum-resistant technology into routine upgrades rather than replacing systems all at once. Starting early could make the transition cheaper and less disruptive, the advisory said.

Waiting could carry business risks as well. Companies that fail to adopt quantum-resistant technology could lose a competitive advantage or eventually be shut out of contracts, including government procurement.

Cybersecurity agencies have been warning for years that organizations need to prepare for the quantum threat well before machines capable of breaking today’s encryption become available.

Last year, U.K. cybersecurity authorities published a roadmap calling for organizations to complete their transition to quantum-resistant cryptography by 2035, with sectors including banking, finance and telecommunications expected to be early adopters.

In June, President Donald Trump signed two executive orders aimed at accelerating U.S. development of quantum technologies and strengthening protections for government systems against future quantum-related cyber threats.

The G7 has also previously warned about the potential impact on the financial sector. In 2024, the group called on finance ministries and central banks to prepare for what it described as “impending threats” stemming from advances in quantum computing.