Data is already at risk. In many environments, it will take up to a decade to migrate to post quantum cryptography. At an absolute minimum, data must be secured with PQC prior to a quantum computer being able to decrypt it. Any data using today’s encryption that is stolen prior to the migration could be decrypted once the quantum computer is available.