Executive Summary

Quantum is shifting from lab talk to program management and liability planning. Law-enforcement and national guidance now frame "harvest now, decrypt later" as an active risk vector, not a hypothetical. Deadlines and milestones exist: the U.S. finalized three PQC standards (FIPS 203/204/205) in August 2024; UK NCSC guidance is steering large organizations to complete migration by ~2035; and Europol's financial forum urges banks to "prepare now." The core stakes: long-lived data confidentiality, signature/PKI integrity, and correlated loss potential across financial services and critical infrastructure.

Hacker Chatter: What's Emerging

Across monitored channels and OSINT pull-throughs, threat actors aren't waiting. They plan around inevitability, not precise dates:

"When discussing timelines, it is important to mention the threat of 'store now, decrypt later'… criminals collect data today, with the intention to decrypt it in the future when quantum computers are available."

— Europol Quantum-Safe Financial Forum, 2025

Financial-sector warnings are now mainstream media:

"Banks should prepare for quantum computer risk now… [criminals] may be storing sensitive data in the hope of decrypting it in future."

— Reuters report on Europol forum, February 2025

Why this matters: actors don't need a cryptographically relevant quantum computer today to change their collection priorities today. That shifts your defensive roadmap — crypto inventory, long-lived data triage — from "future project" to "current control."

Dark-Web Trends in Context: Four Themes You Can Act On

Data harvesting now. Europol repeatedly names "store/harvest now, decrypt later" as the operative threat model, particularly for mergers, medical, and financial data with long shelf life. That creates deferred breach liability in the 2030s–2040s.

Quantum algorithm tinkering. Even if today's proofs-of-concept are impractical, the intent and pathway are visible (Shor-style work, hybrid approaches). Law-enforcement briefings call quantum a cross-cutting enabler for organized crime, not a niche curiosity.

Quantum-as-a-Service mindset. Forums discuss renting capacity when available, mirroring how criminals already abuse commodity cloud for cracking. The service model lowers barriers once hardware matures — timeline-agnostic risk preparation must finish before risk materializes.

Specialist recruitment. Europol and EU reports anticipate criminals sourcing expertise as ecosystems mature — another reason timelines emphasize readiness by the mid-2030s rather than starting then.

Why "Harvest Now, Decrypt Later" Is the Real Risk

This is the immediate, materially plausible quantum threat because it exploits time:

Target classes: health, pensions, life, legal archives, payment/token archives — any data that must stay confidential 10–50 years.

Window: UK NCSC's public guidance points to completing PQC transition by ~2035; U.S. federal programs have set staged migration and procurement against the NIST PQC set already. The risk window for data stolen today runs well beyond first deployments of cryptographically relevant quantum computers.

"Start planning now to avoid last-minute chaos… prepare systems against quantum hacking by 2035."

— UK NCSC coverage, Financial Times

The State of Quantum Research: Calm Realism

No credible authority gives a firm "Q-day" date; most credible public signals cluster around 10–15 years, with wide error bars. Policymakers optimize for downside protection:

• NIST finalized FIPS 203 (ML-KEM), 204 (ML-DSA), 205 (SLH-DSA) on August 13, 2024, locking in enterprise baselines.
• NSA CNSA 2.0: keep AES-256 and SHA-384/512; move signatures and KEM to quantum-resistant profiles; draft profiles even specify e.g., AES-256-GCM for SSH under CNSA 2.0.
• Europol's forum cites a 2035 U.S. federal deadline for agencies to achieve quantum resistance — an explicit schedule anchor for procurement and program plans.

Translation: you don't need a date to act; you have standards and schedules already.

What Regulators and Law-Enforcement Are Saying

"The impact of quantum… on law enforcement will be profound."

— Europol/JRC Observatory Report, 2023

"Quantum computers… could compromise current encryption methods… organizations should begin preparing now."

— UK NCSC guidance (press coverage), 2025

"Identify cryptographic standards vulnerable to quantum and plan operations accordingly."

— Europol Quantum-Safe Financial Forum, to banks, 2025

Stakes: loss of signature validity (claims, audits, chain-of-custody), mass certificate re-issuance, and correlated loss in finance, health, and critical infrastructure if PKI environments degrade on short notice. These are catastrophe-style cyber scenarios, not point incidents.

Conclusion

There is no consensus date for cryptographically relevant quantum computers, and there doesn't need to be. The world's baseline has shifted: we have final standards (FIPS 203/204/205), national-security profiles (CNSA 2.0), and sector advisories (Europol/NCSC) that set the stakes and schedules. Treat quantum risk as a migration and governance program with board visibility, not a future curiosity. The underground's playbook — harvest now, decrypt later — is already in motion; defenders' playbook is now equally concrete.

References

1. Europol/JRC, "The Second Quantum Revolution," Observatory Report, 2023.
2. Europol, "EU-SOCTA 2025: The Changing DNA of Serious & Organised Crime," 2025.
3. NIST, "Approval of Three FIPS for Post-Quantum Cryptography," August 13, 2024.
4. NIST News, "First 3 Finalized Post-Quantum Standards," August 13, 2024.
5. NSA, "CNSA 2.0 Algorithms," May 30, 2025.
6. NSA CSfC Addendum (Draft), "CNSA 2.0 Suite Profile for SSH," April 4, 2025.
7. Europol, "Quantum-Safe Financial Forum — A Call to Action," January 31, 2025.
8. Reuters, "Europol body: Banks should prepare for quantum computer risk now," February 7, 2025.
9. Financial Times / Guardian, coverage of UK NCSC guidance, March 20, 2025.