Imagine helping the world develop new medicines, design better batteries, or tackle problems that today’s computers struggle to solve. That’s the promise of quantum computing. And it could create substantial economic value.
In fact, McKinsey’s 2026 research estimates that quantum computing could generate between $1.3 trillion and $2.7 trillion in value worldwide by 2035. That represents potential benefits for businesses using the technology, rather than just sales of quantum computers.
There’s plenty to be excited about.
But there’s also a security problem we need to address: A sufficiently powerful quantum computer could break some of the protections that keep our digital information private.
That puts an uncomfortable question in front of businesses and governments. How do we prepare for a technology that could deliver major breakthroughs while also putting sensitive information at risk?
Why Security Experts Are Watching “Q-Day”
When you send private information online, encryption helps keep other people from reading it. Related security tools help confirm identities and verify that digital transactions are legitimate.
Some widely used methods rely on mathematical problems that conventional computers would find extremely difficult to solve. A sufficiently advanced quantum computer could make certain problems much easier.
The point when quantum computers can break those protections is often called “Q-Day.”
Nobody knows exactly when that capability will arrive. It also wouldn’t mean that every password, bank account, or security system suddenly fails. Different technologies face different risks. Even so, the potential consequences reach well beyond the technology industry.
Banks need secure communications. Governments need to protect confidential information. Businesses need to safeguard customer records and valuable research. All have reasons to understand where they depend on vulnerable security methods.
Why Waiting Could Be Costly
You might reasonably ask: If the threat is still developing, why worry about it now?
Because information stolen today could remain valuable for years.
Security experts call this “harvest now, decrypt later.” An attacker collects encrypted information, saves it, and hopes to unlock it when more powerful technology becomes available.
Think about medical records, confidential negotiations, or research behind a future drug. That information doesn’t necessarily become harmless just because time has passed. Updating security later wouldn’t erase copies an attacker had already collected.
There’s another practical issue: Large organizations can’t replace their security systems overnight. They need to find out where vulnerable technology is being used, work with suppliers, test replacements, and make sure essential services keep running. NIST warns that this transition is complex and could take years. Starting early gives organizations time to work through those challenges.
The Work to Strengthen Defenses Has Already Started
The good news is that organizations have tools they can begin using.
In August 2024, the U.S. National Institute of Standards and Technology finalized its first three post-quantum cryptography standards. Europe is moving ahead, too. The European Union’s roadmap recommends that member countries begin transitioning by the end of 2026. It calls for high-risk uses to move to post-quantum protection as soon as possible, and no later than the end of 2030.
France’s cybersecurity agency, ANSSI, also aims to introduce post-quantum requirements for products entering its security qualification process starting in 2027. It advises against buying products without post-quantum capabilities after 2030.
So, how can we diversify and trade Q-Day?
One way is to invest in cybersecurity exchange traded funds, such as:
Global X Cybersecurity ETF (NASDAQ: BUG)
With an expense ratio of 0.5%, the BUG ETF invests in companies that stand to potentially benefit from the increased adoption of cybersecurity technology, such as those whose principal business is in the development and management of security protocols preventing intrusion and attacks to systems, networks, applications, computers, and mobile devices.
iShares Cybersecurity and Tech ETF (NYSEARCA: IHAK)
With an expense ratio of 0.47%, the iShares Cybersecurity and Tech ETF tracks the investment results of an index composed of developed and emerging market companies involved in cyber security and technology, including cyber security hardware, software, products, and services. Some of its top holdings include Clear Secure, Akamai Technologies, CACI International, Sentinel One, Fortinet, and Okta, to name a few of its 34 holdings.
IHAK also pays a dividend twice a year. On December 19, 2025, it paid a dividend of just over three cents per share. On June 18, it paid a dividend of just over $0.007 per share.
About Author
