Forecasts cited by the Quantum Alliance indicate that practical quantum threats to existing cryptography could emerge around 2028 or 2029.