Hi everybody, I'm a MSP and we just get a new customer but as soon as we enter we discover that it's a security war!!!
On this company the IT Manager left the company, of course with all sensitive security data access, sue the company and start asking for a lot of money, the company is an law firm and the war started. At this point we got this hits:
1.- Company domain in his hands (in process of recovering)
2.- additional domains bought by a "third" person and try to sell to the company for 3k
3.- Hosted domain administration control (in process of recovery) and 2 email from co-owners password changed
4.- And my main concern: At several computers specific data loss
4.1 Main server infected withcryptolockervirus (recovered from backup with 3 days of work loss)
4.2 Payroll computer loss main database, but with loss I mean unrecoverable...