Misuse Is Confirmed

A less likely but more damaging scenario is that security researchers find the compromised keys were used before browsers blocked them. Confirmed misuse would intensify reputational damage and force urgent incident response by banks, government sites, and authentication providers.

Each figure is the modeled move of the S&P 500 if the outcome occurs. For information only. Not investment advice.