MSP Ransomware Attack: Lessons From a $3M Security Failure

What can CISOs and MSPs learn from a ransomware attack that disrupted 26 client businesses and caused millions in losses? Matt Lee reconstructs the incident and its aftermath.Security leaders will learn how merger due diligence, supply-chain visibility, cyber insurance, incident leadership, and secure-by-default software affect ransomware resilience.Matt is a battle-tested cybersecurity leader known for translating complex technical crises into practical security transformation. In this raw, revealing episode, he opens up about the breach that changed everything - and how it helped shape the philosophy behind Secure by Demand.Matt explains:How a hidden ransomware infection derailed a multi-company mergerWhat most MSPs get dangerously wrong about security riskThe real cost of reactive security: layoffs, lawsuits, and insurance gapsWhat “Secure by Demand” really means (and why it’s missing from most strategies)Why security maturity is the new battleground (not just tooling)How to lead through cyber chaos without losing your sanityEpisode Timeline:(00:00) Intro: Who is Matt Lee and why this episode matters(02:42) Matt’s origin story - from hacker kid to MSP tech(06:19) Falling into security: “I just added ‘and Security’ to my badge”(11:30) The merger that hid a ticking ransomware time bomb(17:04) Voldemort incident discovery: “We bought a company mid-breach”(20:47) The day it hit: Ransomware spreads to 26 client businesses(25:15) What went wrong: due diligence gaps, supply chain blindness(30:22) Incident response chaos and internal suspicion(36:48) Fallout: 18-month recovery, insurance battles, FBI involvement(41:35) Live Compromised: The philosophy Matt built from the wreckage(47:10) The birth of “Secure by Demand” - a challenge to the industry(53:01) Software design flaws: why vendors ship insecure defaults(56:20) Advice for CISOs and MSPs: mindset, tooling, and where to start(59:40) Real-world examples: empathy, leadership, and rebuilding trust(01:03:15) Final reflections: Why the industry needs hard conversationsConnect With Matt on LinkedInPowered by Control D