Academy Sports + Outdoors

With over 21 years in Information Technology, spanning cybersecurity, data privacy and ethical hacking, I’ve seen many disruptive shifts in the digital threat landscape. But nothing looms as large, or as quietly, as the quantum computing revolution.

Quantum computing, long theorized and once viewed as decades away, is approaching a critical inflection point. While the technology promises breakthroughs in medicine, climate modeling and materials science, it also poses a very real and underappreciated danger: the potential to break nearly all current encryption methods that safeguard global digital infrastructure.

Quantum computing, long theorized and once viewed as decades away, is approaching a critical inflection point. While the technology promises breakthroughs in medicine, climate modeling and materials science, it also poses a very real and underappreciated danger: the potential to break nearly all current encryption methods that safeguard global digital infrastructure.

A Hidden time Bomb in Encryption

Modern encryption methods such as RSA, ECC (Elliptic Curve Cryptography) and Diffie-Hellman are built on mathematical problems that are computationally infeasible for classical computers to solve in any reasonable time. However, quantum computers, leveraging Shor’s algorithm, can theoretically solve these problems in hours or even minutes. This means that the encrypted traffic passing through today’s networks could be decrypted tomorrow when quantum computing becomes powerful and scalable enough.

This is often referred to as the ‘harvest now, decrypt later’ attack model. Cyber adversaries, particularly nation states, may already be capturing encrypted data in hopes of decrypting it in the future using quantum computers.

Why IT Matters More than Ever

In 2024, we witnessed another wake-up call in the global cyber arena. The breach of a major telecommunications provider in Southeast Asia revealed that the attackers had quietly exfiltrated petabytes of encrypted voice and messaging data. Analysts fear the motivation wasn’t immediate decryption, but rather long-term strategic gain, possibly tied to quantum decryption capabilities.

"In my two decades of cybersecurity experience, from the early days of firewall rule writing to building enterprise-wide zero trust frameworks, I've seen that threats evolve —but our mindset must evolve faster."

The implications for businesses, particularly in finance, healthcare, defense and retail, are enormous. Customer data, intellectual property and communications, once thought secure, could be laid bare in a post-quantum world.

The Race toward Post-Quantum Cryptography

Recognizing the looming threat, the national institute of standards and technology (NIST) launched a competition in 2016 to standardize post-quantum cryptographic algorithms. In 2022, NIST announced its first group of quantum-resistant algorithms and we are now seeing early guidance and roadmaps for adoption.

Yet, the real-world implementation of post-quantum cryptography (PQC) is complex. From embedded IoT devices to legacy mainframe systems, organizations are burdened by tech stacks that may not support the processing demands or code structures of PQC. This is particularly true in industries like retail, where customer-facing systems and third-party integrations can span decades of technological evolution.

Preparing Now: a Strategic Imperative

As a CISO and data privacy expert, I’ve learned that the best defense isn’t waiting for certainty, it’s planning for inevitability. Quantum threats may still be years away from materializing at scale, but preparation must begin now. Here’s how:

1. Asset and Cryptographic Inventory

Organizations should identify where and how cryptography is used across all systems, data stores and communications channels. Without a clear inventory, prioritization and transition will be chaotic and costly.

2. Quantum Risk Assessments

Conduct regular assessments to evaluate which data types are most at risk of long-term exposure. Intellectual property, legal documents and customer PII are top priorities for quantum-proofing.

3. Vendor & Supply Chain Evaluation

Third-party platforms and SaaS providers must also prepare. Vendor contracts should begin including clauses around quantum readiness and cryptographic resilience.

4. Hybrid Cryptographic Strategies

Transitioning to hybrid models that use both classical and quantum-safe algorithms can provide a bridge toward full post-quantum encryption, ensuring continuity and compatibility.

5. Staff Training & Board Awareness

Like any emerging threat, quantum readiness requires cultural buy-in. Technical teams must be trained on new encryption models and board-level stakeholders need to understand the timeline and risk.

The Bigger Picture

Quantum computing isn’t the first disruptive technology to challenge the security status quo, but it may be the most consequential. Just as ransomware changed how we think about backups, quantum will force a rethinking of how we approach trust, authentication and data protection at every level.

It’s not just a technology problem. It’s a governance, policy and leadership challenge. Businesses that delay risk placing themselves and their customers, in an irreversible position. The time to act is now, not after the threat has already matured.

Final Thoughts

In my two decades of cybersecurity experience, from the early days of firewall rule writing to building enterprise-wide zero trust frameworks, I’ve seen that threats evolve, but our mindset must evolve faster. Quantum computing presents not just a cryptographic hurdle but a fundamental paradigm shift. Leaders must take proactive steps today to ensure their organizations are resilient in the quantum tomorrow. In my two decades of cybersecurity experience, from the early days of firewall rule writing to building enterprise-wide zero trust frameworks, I’ve seen that threats evolve, but our mindset must evolve faster. Quantum computing presents not just a cryptographic hurdle but a fundamental paradigm shift. Leaders must take proactive steps today to ensure their organizations are resilient in the quantum tomorrow.