Europol and UC3M's 7 October 2026 Harvest Now, Decrypt Later Report Puts Health Records in the Ten-Year Risk Window: Hospital TLS, Archives and the EU Roadmap's 2030 Target
Europol names medical records among data worth stealing now and decrypting later
Quentir Medicine Monitor
Evidence-based insights for quantum medicine.
A patient's file can stay sensitive for most of a lifetime. A diagnosis made in childhood, a psychiatric admission, an HIV test or a genetic result can still matter to that person forty years later, for insurance, for employment and for plain dignity. The symmetric ciphers that encrypt the content of that file, such as AES-256, are considered robust against quantum attack. The weak point is the public-key cryptography, RSA and elliptic curves, that sets up those content keys in transit or wraps them in an archive. It was designed for a far shorter horizon, and it rests on mathematics that a large enough quantum computer is expected to break.
On 7 October 2026 Europol put that mismatch on paper. Its cybercrime unit, EC3, released two reports on quantum computing, and the second, titled harvest now, decrypt later and written jointly with Universidad Carlos III de Madrid (UC3M), lists medical records among the kinds of information that must stay confidential for many years and are therefore worth stealing in encrypted form today. The attacker in this scenario needs no quantum computer at the moment of theft. They copy encrypted traffic or files now and keep them until the means to read them exists.
For hospital security officers, health-IT vendors and the people who buy their systems, the report is useful because it is specific. It names the protocols at issue, explains which configurations leak the most, and ties its advice to the move to post-quantum cryptography, the new public-key algorithms designed to resist both conventional and quantum attack. It also says plainly that there is currently no clear evidence of this technique being exploited systematically at scale.
The Europol press release of 7 October 2026 announces two publications. The first, on cryptocurrencies, concludes that wallet keys are the main point of exposure for digital assets. The second, the Harvest Now, Decrypt Later report, was produced by Europol and UC3M within the Europol EC3 Advisory Group on Research and Development. The release states that the approach is particularly relevant to government communications, intellectual property, medical records and law enforcement files.
Post-Quantum Authentication for Internet of Medical Things Devices: Sutradhar and Venkatesh's Lattice-Signature Prototype of 3 October 2026 and the Gap to NIST FIPS 204
Post-quantum signatures for medical device reports
Quentir Medicine Monitor
Evidence-based insights for quantum medicine.
A heart-rate reading from a wearable patch or a bedside monitor only helps a clinician if it really came from that patient's device and arrived unchanged. Hospitals already depend on digital signatures for that assurance, and most of those signatures rest on mathematics that a large quantum computer is expected to break.
Two computer scientists in India have posted a prototype that addresses this problem for the Internet of Medical Things, the growing population of connected wearables, bedside monitors and telemedicine devices. Kartick Sutradhar of the Indian Institute of Information Technology Sri City and Ranjitha Venkatesh of GITAM University Bengaluru describe a scheme for post-quantum authentication of medical device reports in arXiv preprint 2610.04661, posted on 3 October 2026. Its most practical feature is batch verification: a hospital gateway checks the signatures of many incoming reports in one vectorized step instead of one by one.
For a chief information security officer, a biomedical engineering lead or a procurement team writing device requirements, the paper gives a clear picture of what a quantum-resistant telemetry chain has to do, and it shows how much work remains between a laboratory prototype and a device a hospital could buy.
The design has three parts. First, each patient device packages its readings, such as heart rate, blood oxygen saturation (SpO2) and temperature, into a medical report in canonical JSON, a fixed text layout that always produces the same bytes for the same content. The report carries a timestamp, and the device signs it with a private key using what the authors call an ISIS-like lattice construction, a signature built on a hard problem over mathematical lattices.
Second, a hospital gateway receives the reports, looks up each patient's public key and checks every signature. Because the timestamp is inside the signed content, a captured report cannot simply be sent again later without detection, provided the gateway enforces a time window or rejects duplicates, which the authors list as an implementation requirement.
Ubikare, Multiverse Computing and Vicomtech's Q-CLINIC Receives the Ennova Health AI Prize, Announced 2 October 2026: Quantum-Inspired Language Models for Coding Clinical Notes in SNOMED CT and LOINC
A quantum-inspired language model for clinical coding
Quentir Medicine Monitor
Evidence-based insights for quantum medicine.
Much of what a hospital knows about its patients sits in free text. A discharge letter, a nursing note or a dictated consultation carries diagnoses, medications and test results in ordinary sentences, and someone has to turn those sentences into structured codes before the information can feed a registry, a quality report or a research query.
Three companies from the Basque Country say they are building a tool for that job. The health software company Ubikare leads Q-CLINIC with the research center Vicomtech and the quantum software company Multiverse Computing. According to a press release distributed through Europa Press on 2 October 2026, the project has received the Ennova Health prize of the Spanish medical and pharmacy titles Diario Médico and Correo Farmacéutico, in the category of artificial intelligence and data management. According to the partners, the system combines quantum-inspired compression of large language models with an extraction pipeline that codes clinical entities using SNOMED CT and LOINC, with HL7 FHIR for data exchange.
The prize was collected by Ángel Díez, chief executive and founder of Ubikare, Gorka Unamuno, head of innovation and strategic alliances at Multiverse Computing, and Gonzalo López, business development manager for digital health and biomedical technologies at Vicomtech. The project is funded by the Basque Government through the Smart Industry Quantum Technologies 2025 program of the regional development agency SPRI. The stated goal is to cut the administrative time of healthcare professionals by up to 40 percent.
For a hospital information officer or a clinical coding manager, the interest lies in two promises: a language model small enough to run on the hospital's own servers, and output that arrives already mapped to the terminologies and exchange formats the hospital uses. Both deserve a close reading, because the public material so far describes an approach and a goal and reports no test results.
Zhao, Preskill and Huang's 8 April 2026 Paper Puts a 68,000-Cell Blood Dataset Benchmark Under 60 Logical Qubits: What a Quantum Memory Advantage Means for Hospital Genomics
Quentir Medicine Monitor
Evidence-based insights for quantum medicine.
On 8 April 2026 seven authors from Caltech, MIT, Google Quantum AI and the startup Oratomic, among them John Preskill and Hsin-Yuan Huang, posted a 144-page proof that, for a specified family of classification and dimension-reduction tasks under stated assumptions, a quantum computer of polylogarithmic size reaches a prediction performance that any classical machine would need exponentially more memory to match. The claim reached a wider readership on 11 September 2026, when WIRED Japan explained it to museum visitors as an advantage in size, not in speed.
The paper's medical test case is a genomics one. In a numerical benchmark on the expression profiles of 68,000 peripheral blood cells, the authors report that their method separates cell types and finds the main axis of variation with a calculated requirement of fewer than 60 logical qubits, where the classical methods chosen for comparison need four to six orders of magnitude more memory units. The proposed protocol draws random samples, processes each once and discards it; the benchmark reports performance and an estimated memory requirement, and it did not run that stream on a quantum machine. The advantage the authors prove is one of memory, not speed, and that distinction decides what a hospital genomics group should make of it.