Companies know they have a problem with generative AI and quantum security. They just haven’t done much about it yet.

That’s the upshot of Utimaco’s 2026 Digital Trust Report, a commissioned study of 250 large U.S. companies released at RSAC 2026. The research, conducted by 451 Research from S&P Global, exposes a stark gap between awareness and action across both AI and quantum security.

On the AI side, 78% of respondents said data breaches are the greatest risk associated with generative AI that must be addressed in the next 12 months. Close behind: 77% flagged intellectual property theft as a top concern. Yet more than half (57%) have not yet implemented any countermeasures. Over 90% say AI is used in daily production operations, and nearly two-thirds report running hybrid IT infrastructure with strategic public cloud workloads. So the exposure is real and widespread; the response is not.

The quantum findings are even more striking. Seventy-two percent of respondents identified attacks on legacy data as the biggest quantum security risk, pointing specifically to “harvest now, decrypt later” (HNDL) attacks, where adversaries collect encrypted data today with the intent to decrypt it once quantum computing matures. Despite that recognition, 75% have not implemented a corresponding solution. Only 23% have deployed anything to address HNDL.

Data sovereignty rounded out the findings. Eighty percent of respondents rated protecting customer data as “very” or “critically” important, even as the U.S. lacks a national privacy law equivalent to GDPR. The report notes that sovereignty has become a genuinely global concern regardless of local regulatory requirements.

“Given the new risks posed by technologies such as AI and quantum computing, data protection and data security require strategic measures,” said Tina Stewart, CMO at Utimaco. “Developing a long-term encryption strategy provides the necessary flexibility to address current data protection threats to AI and future risks posed by quantum computing.”

451 Research analyst Justin Lam put it plainly: “The tension between enterprise risk and readiness is real.”

Utimaco makes hardware security modules and key management solutions for on-premises and cloud environments. The full 2026 Digital Trust Report is available for download from Utimaco’s website.