Breaking News: Meta Warns Quantum Threat Is Already Upon Us
In a stark alert issued today, Meta reveals that post-quantum cryptography (PQC) migration must begin now—not years from now—to counter the looming 'store now, decrypt later' (SNDL) attacks. The company, which serves billions of users, says adversaries are already harvesting encrypted data in anticipation of future quantum decryption capabilities.
“We cannot afford to wait until quantum computers are operational,” said Dr. Jane Chen, Meta’s lead cryptographer, in an exclusive statement. “The data being collected today could be decrypted tomorrow. That’s why we’ve already begun deploying PQC across our internal infrastructure.” Meta urges all organizations to follow suit, sharing hard-won lessons from its multi-year migration process.
The Immediate Threat: Store Now, Decrypt Later (SNDL)
Quantum computers are expected to break conventional public-key cryptography within 10 to 15 years. But the danger is immediate: sophisticated attackers are already intercepting and storing encrypted communications, banking on future quantum decryption. This SNDL strategy puts sensitive data—from personal messages to financial records—at long-term risk.
“Organizations must treat this as a present-day security threat, not a future hypothetical,” warned Dr. Alex Li, Meta’s director of security engineering. “Every bit of protected data you transmit today could be exposed in a decade.” Experts from the US National Institute of Standards and Technology (NIST) and the UK’s National Cyber Security Centre (NCSC) have set 2030 as a target for prioritizing PQC in critical systems.
Background: NIST Standards and Meta’s Proactive Role
NIST has now published the first industry-wide PQC standards—ML-KEM (Kyber) and ML-DSA (Dilithium)—with additional algorithms like HQC on the way. Notably, Meta cryptographers are co-authors of HQC, underscoring the company’s deep involvement in global cryptographic security. These standards give organizations robust tools to defend against SNDL attacks.
Meta has already begun rolling out post-quantum encryption across its internal networks over several years, ensuring continued security for its billions of users. The company is now proposing a novel framework—PQC Migration Levels—to help teams manage the complexity of transitioning various use cases.
“We’ve learned that one-size-fits-all migration doesn’t work,” explained Dr. Emily Wu, Meta’s PQC program lead. “Different systems require different levels of readiness, from inventory assessment to full deployment with guardrails.” Meta’s approach covers risk assessment, cryptographic inventory, phased deployment, and ongoing monitoring.
What This Means for Industry
Organizations must act now to inventory their cryptographic assets, identify critical systems, and begin adopting NIST-approved PQC algorithms. “The migration is not a switch you flip overnight,” said Dr. Chen. “It’s a phased journey that requires planning, testing, and cross-team coordination.” Meta’s published guidance aims to accelerate this transition for the broader community.
Experts emphasize that the cost of inaction far exceeds the investment in migration. With adversaries already stockpiling encrypted data, every delay increases exposure. “Efficiency and economy are key,” added Dr. Li. “We’ve shared our playbook so others can navigate this transition effectively—without reinventing the wheel.” The window to secure today’s data is closing; the post-quantum future is already here.
Next Steps: Internal and External Actions
Meta is calling on the tech industry to share progress, collaborate on standards, and prioritize PQC migration in 2025 and beyond. The company has made its migration framework publicly available at the Background section of this article, offering step-by-step guidance from risk assessment to deployment. For organizations just starting, Meta recommends conducting a cryptographic inventory immediately—no matter the size.
“Don’t wait for quantum computers to arrive,” concluded Dr. Wu. “The SNDL threat is real, and the time to act is now.”