Short answer: be prepared, not alarmed. Several risks are real and documented, such as access held in infrastructure networks and the slow move off quantum-vulnerable cryptography. None of the sources we checked point to a specific 2027 catastrophe. This FAQ covers the common claims.
The common claims
Will quantum computers break encryption in 2027?
No source we checked gives a date. NIST says some experts predict a capable device within a decade, and CISA says the capability does not yet exist but organizations must begin preparing. See Is Q-Day coming in 2027?.
Is a hostile state inside our critical infrastructure?
CISA, NSA and FBI assess with high confidence that PRC state-sponsored actors have pre-positioned in US critical infrastructure IT networks, with an aim of enabling disruption in a major crisis. That describes access, not an attack that has happened. See Volt Typhoon pre-positioning explained.
Will AI launch autonomous attacks?
The 2026 International AI Safety Report, as summarized by trade press, says fully autonomous end-to-end attacks have not been reported, while AI assists at several stages. See Will AI cause mass cyberattacks by 2027?.
Can hackers turn off the grid?
They have caused a regional outage in Ukraine in 2015, affecting about 225,000 customers. It was restored. See Can a cyberattack shut down the power grid?.
What about the Year 2038 problem?
It is dated: 19 January 2038, for systems with signed 32-bit time. It is fixable, mostly by 64-bit time, and embedded devices are the main worry. See The Year 2038 problem.
Could a solar storm wipe out our systems?
NOAA says strong storms can induce harmful currents in power grids and disrupt satellites and navigation. Plan for backup power and time sources. See Solar storms and IT.
What to do this quarter
- Patch internet-facing systems quickly.
- Start a cryptographic inventory.
- Write down your top shared dependencies and a fallback for each.
- Test a restore.
How to keep this proportionate
A useful rule is to match effort to evidence. Where a government advisory documents access or an outage, as with the infrastructure examples, act on its mitigations. Where a source gives a scenario without a date, as with quantum, start the cheap, early steps such as inventory. Where a claim has no primary source, note it and move on.
Review this list once a year. The facts move: NIST's drafts get finalized, reports are updated and new advisories appear. A yearly check keeps your plan current without making risk a constant source of anxiety.
Quick check
Is there a confirmed doomsday event scheduled for 2027?
Not in any source we checked. The documented risks are ongoing and mostly addressed by ordinary security and continuity work.
Sources
- NIST: first 3 finalized post-quantum encryption standards
- CISA: quantum and post-quantum cryptography
- CISA, NSA, FBI advisory AA24-038A on PRC state-sponsored actors
- International AI Safety Report
- CISA alert IR-ALERT-H-16-056-01 on the Ukraine power grid attack
- Wikipedia: Year 2038 problem
- NOAA Space Weather Prediction Center: Geomagnetic storms
Last reviewed: 19 October 2026.
