“I Was the Breach”: Inside a $3M Ransomware Crisis Every CISO Should Study

Matt Lee, now Senior Director of Security & Compliance at Pax8, reveals how a ransomware blast at his former MSP triggered a multi-million-dollar fallout, 26 client disruptions, and a complete redefinition of what security leadership really means in today’s world.Matt is a battle-tested cybersecurity leader known for translating complex technical crises into practical security transformation. In this raw, revealing episode, he opens up about the breach that changed everything - and how it helped shape the philosophy behind Secure by Demand.He explains:How a hidden ransomware infection derailed a multi-company mergerWhat most MSPs get dangerously wrong about security riskThe real cost of reactive security: layoffs, lawsuits, and insurance gapsWhat “Secure by Demand” really means (and why it’s missing from most strategies)Why security maturity is the new battleground (not just tooling)How to lead through cyber chaos without losing your sanityEpisode Timeline:(00:00) Intro: Who is Matt Lee and why this episode matters(02:42) Matt’s origin story - from hacker kid to MSP tech(06:19) Falling into security: “I just added ‘and Security’ to my badge”(11:30) The merger that hid a ticking ransomware time bomb(17:04) Voldemort incident discovery: “We bought a company mid-breach”(20:47) The day it hit: Ransomware spreads to 26 client businesses(25:15) What went wrong: due diligence gaps, supply chain blindness(30:22) Incident response chaos and internal suspicion(36:48) Fallout: 18-month recovery, insurance battles, FBI involvement(41:35) Live Compromised: The philosophy Matt built from the wreckage(47:10) The birth of “Secure by Demand” - a challenge to the industry(53:01) Software design flaws: why vendors ship insecure defaults(56:20) Advice for CISOs and MSPs: mindset, tooling, and where to start(59:40) Real-world examples: empathy, leadership, and rebuilding trust(01:03:15) Final reflections: Why the industry needs hard conversationsConnect With Matt on LinkedInPowered by Control D