Quantum Security, Cybersecurity

GSK CISO Warns Quantum Threat to Data Is Already Here

Avatar of Ivy Delaney
May 13, 2026 by Ivy Delaney

GlaxoSmithKline’s SVP and Global CISO, Michael Elmore, warns that the threat from quantum computing to encrypted data is not distant; adversaries are actively employing “harvest now, decrypt later” strategies to steal information for future exploitation. This poses an immediate risk to industries like healthcare and pharmaceuticals, where sensitive data requires decades of protection, making them prime targets for this evolving attack vector. “For industries like healthcare and pharmaceuticals, where sensitive data must remain protected for decades, waiting is not an option,” Elmore stated. The Quantum. Tech World event on June 25 & 26 will explore how some of the most valuable enterprise data may already be compromised, even if currently unreadable, underscoring the urgent need for a shift toward post-quantum cryptography.

“Harvest Now, Decrypt Later” Accelerates PQC Migration Urgency

This “harvest now, decrypt later” tactic represents a tangible and present threat, shifting the conversation from theoretical risk to immediate cybersecurity concern for organizations managing sensitive information. The Tech World event on June 25 & 26 will explore how valuable enterprise data is potentially already compromised, even if currently unreadable, highlighting the need for immediate action. Experts from organizations including IBM, AT&T, and the National Institute of Standards and Technology will address practical migration strategies and the development of crypto-agile systems capable of adapting to evolving cryptographic standards. Elmore advocates for a multi-year effort focused on cryptographic inventories, prioritizing the protection of high-risk, long-life data, and implementing scalable migration strategies. “Post-quantum security is no longer a future problem we can simply ignore or expect vendors to solve for the enterprise; it’s a resilience challenge that will require a new crypto agility approach for future-proofing your crypto resilience,” he stated, signaling a fundamental change in how organizations approach data security and long-term digital trust.

Michael Elmore, SVP and Global Chief Information Security Officer at GlaxoSmithKline, warns that adversaries are actively collecting encrypted data anticipating future decryption capabilities, a strategy particularly concerning for data with long-term confidentiality requirements. Establishing comprehensive cryptographic inventories is a key initial step, followed by building systems capable of seamlessly integrating evolving algorithms. Industry leaders will convene at Quantum.

Post-quantum security is no longer a future problem we can simply ignore or expect vendors to solve for the Enterprise – it’s a resilience challenge that will require a new crypto agility approach for future-proofing your crypto resilience,” said Michael Elmore, SVP and Chief Information Security Officer, GSK .

Michael Elmore, SVP and Chief Information Security Officer, GSK

Quantum.Tech World: Industry Leaders Align on Post-Quantum Strategy

He warns that organizations are already facing risks from “harvest now, decrypt later” strategies, where encrypted data is collected with the intention of cracking it once quantum computing power matures. This tactic presents a unique challenge for sectors like healthcare and pharmaceuticals, where long-term data confidentiality is paramount, and regulatory requirements demand decades of protection for sensitive information. The urgency of this situation will be a central focus at the Quantum event. Elmore anticipates outlining a practical, multi-year roadmap for enterprises to achieve quantum readiness, stressing the need for a new approach to cryptographic agility to future-proof resilience. The event, drawing over 1,000 senior decision-makers from organizations including IBM, Mastercard, and Boeing, aims to move the conversation beyond theoretical risk and into practical execution, identifying existing vulnerabilities and charting a course toward a quantum-safe future.

For industries like healthcare and pharmaceuticals, where sensitive data must remain protected for decades, waiting is not an option.

Michael Elmore, SVP and Global Chief Information Security Officer at GlaxoSmithKline
Stay current

See today’s quantum computing news on Quantum Zeitgeist for the latest breakthroughs in qubits, hardware, algorithms, and industry deals.

Tags:
post-quantum cryptography
Avatar of Ivy Delaney

Ivy Delaney

Ivy Delaney has been working with neural networks and machine learning since the mid-nineties, back when a couple of hidden layers and a long afternoon of training counted as ambitious. She has watched the field go from academic curiosity to the thing quietly running underneath everything, and she brings that long view to quantum computing. For Quantum Zeitgeist she covers the ground where the two fields meet. That means quantum machine learning and the variational algorithms it leans on, and it also means the less glamorous but more interesting story of classical machine learning already doing real work inside quantum machines, decoding error-correcting codes, calibrating noisy hardware and learning the error models that simulators depend on. She writes about the hardware those algorithms have to run on too, and about the post-quantum cryptography scramble that the same hardware has set off. Her stories typically start with the paper, whether that is peer-reviewed work, conference proceedings or an arXiv preprint, with the source linked so you can hold a claim up against the research it came from. She is unimpressed by benchmarks that will not say what they beat, and by demonstrations that only work in the press release.

Latest Posts by Ivy Delaney: