up:: For Press
For a general audience
Everything a piece for general readers needs, in the order it’s usually needed: the story, the 5 things that matter, the numbers with their sources, an attributable quote, the questions readers will ask, and the errors worth avoiding.
What’s the story in one paragraph?
Somebody is copying encrypted data off networks today and storing it until a machine exists that can read it. That machine doesn’t exist and no verified break has ever happened, but the method for building it was published in 1994 and has never been overturned. Nobody will ever be told their data was collected, because copying encrypted traffic breaks nothing and creates no incident any disclosure law recognizes. It only matters for information that’s still sensitive years from now, which rules out most daily activity and rules in genetic data, medical history, biometrics, and anything permanent. The replacement encryption is finished, and phones and browsers have been quietly deploying it since 2023.
What are the 5 most important things?
- Nothing is broken today, and no machine capable of it exists. Estimates of what it would take fell from 20 million noisy qubits in 2019 to under 1 million in 2025, and the largest machines built hold low thousands of noisy qubits.
- The theft happens now and the reading happens later. Encrypted data copied today can be stored and opened the day the machine arrives, so the exposure is created on the day it’s sent.
- It only matters for what stays sensitive. Lunch plans in 15 years are worthless. A genome, a fingerprint, and a psychiatric history stay sensitive for life, and none of them can be reissued.
- Nobody will ever notify you. Copying breaks nothing, so no incident exists, and every breach-notification law is built around an incident.
- What to do about it is short, free, and mostly already happening. Keep devices and apps updated, which is the single action that matters most. Use a messaging app that’s already been upgraded for anything that must stay private for years. Delete what you’re finished with. Think hard before another DNA test or biometric enrollment, since neither can be withdrawn and a DNA test enrolls your relatives too. Ask your doctor, bank, and insurer what their timeline is. And buy nothing, because no consumer product fixes this and the ones being marketed charge for a problem they don’t address.
Which numbers are sourced and safe to use?
| The figure | The accurate wording | Source |
|---|---|---|
| 6 billion people, 74% of the world | Using the internet in 2025 | ITU Facts and Figures 2025, itu.int |
| 28% to 49% within 10 years | Expert-survey range for a capable machine, from 26 specialists | Global Risk Institute, globalriskinstitute.org |
| ~60% familial match | Share of genealogy-database searches for a person of European descent in the U.S. returning a third cousin or closer | Science 362(6415), 2018, science.org |
| 6.9 million people from 14,000 accounts | Exposed in the 23andMe incident, through reused passwords | Texas Attorney General, texasattorneygeneral.gov |
| 147 million people | Exposed in the 2017 Equifax breach, most never customers | Federal Trade Commission, ftc.gov |
| Nearly 90% of U.S. homebuyers | Hold a 30-year mortgage, a document set live for 3 decades | Freddie Mac, myhome.freddiemac.com |
| 1994 | The year the method was published | Shor, arxiv.org |
What’s the attributable quote?
CISA, the NSA, and NIST wrote jointly on August 21, 2023 that attackers “could be targeting data today that would still require protection in the future… using a catch now, break later or harvest now, decrypt later operation.”
Source: CISA, NSA, and NIST, “Quantum-Readiness: Migration to Post-Quantum Cryptography,” August 21, 2023, factsheet PDF.
What will readers ask?
Which errors draw corrections?
- “Quantum computers will break all encryption.” Public-key cryptography breaks. Symmetric encryption and hashing survive with larger sizes, which is why the same NSA advisory retiring RSA keeps AES-256 in place.
- “Encryption will be broken in 2030.” The 2030 and 2035 dates are retirement schedules for the old algorithms rather than predictions about a machine.
- “Your bank account will be emptied.” Reading old traffic reveals information about a person rather than granting access to their money.
- “60% of people can be identified from DNA databases.” The finding is specific to people of European descent in the United States. Generalizing it makes it false.
- “There’s a countdown to Q-Day.” Nobody can date it, and a specific countdown is a sales device.
The full list of recurring errors, each with its accurate version, is What gets reported wrong.
Go deeper: the technical layer
The pages below are the version written for security professionals, with every primary source and open dispute intact. These are the ones a general-audience piece is most likely to need.
Section indexes: Foundations MOC · Security Basics MOC · The Threat MOC · Quantum Computing MOC
Where to go next
- Every figure and where it comes from carries every number with the phrasing that states it accurately.
- The primary documents behind every claim is the annotated source index.
- A glossary of the terms you will meet defines the vocabulary.
- Start Here MOC is the reader-facing introduction, and Whats At Risk MOC and What To Do MOC carry the rest.
- For Press is the full index.
Last verified 2026-08-02 · Maintained by Addie LaMarr, LaMarr Labs.