Logo

51% of cyberattacks in the MSP sector lead to unplanned expenses to fix security gaps

31% of the MSPs that spotted an attack report losing a competitive edge compared to 20% across other industries surveyed.

Netwrix has released additional findings for the managed service providers (MSP) sector from its annual 2024 Hybrid Security Trends Report based on a global survey of 1,309 IT and security professionals.

It reveals that 76% of MSPs spotted a cyberattack on their infrastructure within the last 12 months, similar to the results among organisations overall (79%). Among those that were attacked, every second MSP (51%) had to deal with unplanned expenses to fix the security gaps. Moreover, 31% experienced a loss of competitive edge, and 27% faced compliance fines compared to 20% and 17% across other verticals.

For the MSP sector, each second security incident in the cloud (49%) was associated with user account compromise, while 46% of attacks on premises were ransomware or other malware attacks. In contrast, these types of attacks were less common among other industries.

"Our team has had significant success in handling user account compromises and ransomware attacks using Netwrix 1Secure,” says Rory Cooksey, Director of Growth at WheelHouse IT. “Its robust monitoring and alerting capabilities allow us to detect and respond to threats swiftly, ensuring minimal disruption to our clients' operations. The comprehensive visibility and control provided by 1Secure empower us to confidently address and mitigate these security challenges, maintaining the highest level of protection for our clients."

“MSPs largely rely on software-as-a-service (SaaS), platform-as-a-service (PaaS), and infrastructure-as-a-service (IaaS) solutions. These are usually accessible to both MSPs and their clients, significantly limiting the implementation of network-based restrictions like IP address filters. As a result, attackers target such cloud-based solutions because they might be easier to infiltrate, and one successful breach gives keys to many kingdoms”, says Dirk Schrader, VP of Security Research at Netwrix

“The service provider is a promising target for ransomware gangs. On one hand, MSPs can hardly afford downtime and would be more eager to have the operations back up and running, which increases the chances for ransom payout. On the other hand, breaching a service provider can be just a step toward the real target in a supply chain attack. MSPs should adequately assess the risks and rely on threat intelligence to make their security decisions,” says Ilia Sotnikov, Security Strategist at Netwrix. 

McLaren Racing and Iron Mountain join forces to digitally preserve and enhance historical assets, enriching fan engagement and global connectivity.
Endava strengthens its collaboration with MSPS Groep, focusing on digital solutions for enhanced healthcare services and patient experiences.
Lenovo collaborates with Rejoose to enhance carbon data accuracy, supporting transparent, data-driven net-zero procurement decisions.

Horizon3.ai's EMEA Partner Conference

Posted 1 week ago by Aaron Sandhu
Horizon3.ai celebrated partner excellence at the EMEA Partner Conference, showcasing advancements in cybersecurity and recognising exceptional...
Karlton Gray ascends to drive collaboration within Schneider Electric's partner ecosystem, focusing on sectors like education, healthcare, and more.
Seagate Technology and Acronis collaborate to deliver scalable, secure archival storage solutions, catering to the growing demands of AI-driven data...
inforcer joins forces with Microsoft to streamline multi-tenant management for MSPs, enhancing the delivery of Microsoft 365 and AI-powered services.
Zero Networks partners with Exclusive Networks to expand its zero trust security solutions across Europe, focusing on the UK and Ireland as key...