Who’s Breach Is It – The Legal Grey Area of MSP Client Transitions

Here's a scenario that's playing out right now, for several MSPs across the country, and based on our research, most do not have it covered in writing. A client decides to switch providers. The new MSP starts rolling out EDR and standing up monitoring. The old MSP begins winding down. Somewhere in that overlap, credentials are still active, agents are only half deployed, and it isn't clear who's actually watching. Then the breach hits. Now two MSPs are pointing at each other, the client's dat...