Competitors got my MSP client list and license expiration dates
When a vendor accidentally exposes a complete MSP client portfolio, competitors gain immediate visibility into exact license counts and renewal dates. This leak forces service providers to scramble through mandatory data breach notifications while facing severe reputational damage and the risk of clients being poached.
What the numbers show
Counted from the threads quoted below. How we count
- The most recent one is from October 2026.
- This comes up 110.9× more often in r/msp than across the site as a whole.
What people tried
Every workaround mentioned in the threads below. We haven’t tested any of them — and nobody here is claiming they worked.
Found another way around this?
Share your steps and trade-offs so fellow engineers don't have to reinvent the wheel. No account required.
- 1waiting for recall emails to take effectDid this help you?
- 2checking direct messages for leaked copies of the spreadsheetDid this help you?
- 3notifying affected clients and preparing damage controlDid this help you?
- 4Migrating to alternative payroll providers such as SurePayrollDid this help you?
- 5Implementing company-wide security and anti-phishing trainingDid this help you?
In their words
Unedited, grouped by where they were said, most upvoted first within each place, each linked to the thread it came from.
“This is a huge disaster for some msps, imagine your direct competitors now knowning what licenses your clients have, when they expire, and what your entire client portfolio is.”source ↗
“Feel for the UK msp's for this, depending on the data it may constitute a data leak so they'll need to inform their clients and suffer reputational damage.”source ↗
“I have already obtained a copy of the list and can see it contains all uk msps their full client list, including license count, NCE end dates the lot.”source ↗
“Our IT team confirmed the breach is on Gusto’s end.”source ↗
“We’ve been using Gusto for 5 years and it’s become worse every year. Customer service bots can’t do anything and the outsourced agents are useless. We just experienced a major breach. Our owner is being impersonated and sending texts to staff emergency contacts that have only ever been entered on Gusto.”source ↗
Where this came up
People with this problem also raised
- 8How to deal with enterprise vendors missing SLAs
- 8How to clean up a hacked website and fix malware
- 4How to get enterprise vendor support to actually help
- 7How to get a vendor to actually fix a billing error
- 5How to follow up with a client who picked a cheaper vendor
- 4What to do if your wedding photographer is rude or unresponsive