Nothing has been broken yet, however data can be collected now and be cracked when the time comes, hence why there is a push.

Can a theoretical strong enough quantum computer break PFS?

	▲	wahern 3 hours ago \| parent [-]
		QC breaks perfect forward secrecy schemes using non-PQC algorithms, same as for non-PFS. PFS schemes typically use single-use ephemeral DH/ECDH key pairs for symmetric key exchange, separate from the long-term signing keys for authentication.

[dead]