EP291 - The Real Lessons Learned from a £500k MSP Ransomware Attack with Ken Roulston & Ian Luckett

In this episode of The IT Experts Podcast, we share one of the most honest and eye-opening conversations we have ever had about a ransomware attack and the devastating impact it can have on an MSP. Ken Roulston joins me to openly discuss the events that led to a real world cyber incident which ultimately cost more than £500,000, challenged every part of the business, and tested the resilience of the leadership team in ways few business owners ever experience. 

  

This conversation is not designed to create fear. It is designed to create awareness. Every MSP owner believes they have the right security in place, the right backups running and the right processes protecting both their own business and their clients. Ken's experience demonstrates why confidence must always be backed up with verification, discipline, and continual improvement. 

  

Ken shares the full story of how a successful acquisition appeared to strengthen the business before a ransomware attack turned everything upside down. What began as a routine business trip quickly became one of the most stressful weekends of his career. A private data centre belonging to the newly acquired business had been compromised, leaving more than forty client environments inaccessible. As the investigation unfolded, it became clear that the attackers had gained access through one of the least protected customer environments before remaining undetected for several months. 

  

One of the biggest lessons from this ransomware attack is that strong technology alone is never enough. Human error, incomplete backup verification and inconsistent security standards combined to create a perfect opportunity for attackers. The discussion explores how backup systems appeared to be functioning correctly while failing to produce recoverable data when it mattered most. It is a reminder that testing your disaster recovery process is every bit as important as performing the backup itself. 

  

Ken explains the difficult decision to negotiate with the attackers after discovering there was no viable way to restore the systems independently. He openly describes the emotional pressure of balancing legal advice, customer expectations, and the financial impact while attempting to recover critical business systems. It is an extraordinary insight into a situation that many MSP owners hope they will never face, although every provider should prepare for the possibility. 

 

As the recovery began, the challenge shifted from retrieving encrypted information to rebuilding more than forty client environments from the ground up. The team worked around the clock for weeks to restore services, rebuild trust and move customers onto more resilient cloud infrastructure. Despite the enormous disruption, the business retained the majority of its recurring revenue and emerged with valuable lessons that continue to shape how Ken advises MSPs today. 

  

Throughout the episode we explore the practical actions every MSP should take immediately. Ken highlights the importance of enforcing minimum security standards across every client, verifying backups regularly, maintaining isolated recovery environments, and investing in your own cybersecurity with the same commitment you expect from your customers. One of the strongest messages throughout the conversation is that MSPs cannot afford to become complacent. Your clients' security directly affects your own business, making security standards a shared responsibility rather than an optional service. 

  

We also discuss how ransomware attacks continue to evolve as cybercriminals become increasingly sophisticated. With artificial intelligence accelerating both defensive capabilities and cyber threats, MSPs must continually review their security posture, educate their teams, and ensure every client understands the importance of maintaining modern cybersecurity standards. Building resilience is no longer about reacting to incidents. It is about creating systems, habits and leadership that reduce risk long before an attack occurs. 

  

If you are responsible for protecting client environments, leading an MSP or planning future growth, this episode offers valuable lessons drawn from genuine experience rather than theory. Ken's willingness to share one of the most difficult periods of his career provides an opportunity for every MSP owner to strengthen their own business before a ransomware attack forces those lessons upon them. 

  

The conversation serves as a powerful reminder that preparation, leadership and continual improvement remain the strongest defence against an ever-changing threat landscape. Every MSP can learn from this experience and use these lessons to build greater confidence, stronger security and a more resilient business for the future. 

 

Connect with Ken Roulston through LinkedIn. 

 

 

Make sure to check out our Ultimate MSP Growth Guide, a free guide that walks you through a proven process to take your MSP from stuck to scalable, without working even more hours. It’s 44 pages rammed with advice, insights and inspiration to help you decide what support is available to you now if you want to grow and scale your business. Click HERE to get your copy. 

 

Connect on LinkedIn HERE with Ian and also with Stuart by clicking this LINK 

 

And when you’re ready to take the next step in growing your MSP, come and take the Scale with Confidence MSP Mastery Quiz. In just three minutes, you’ll get a 360-degree scan of your MSP and identify the one or two tactics that could help you find more time, engage & align your people and generate more leads. 

 

If you’re serious about growth and want to explore what this could look like for your MSP, you can book a Right Fit Clarity Call with us HERE. 

OR  

To join our amazing Facebook Group of over 400 MSPs where we are helping you Scale Up with Confidence, then click HERE 

Until next time, look after yourself and I’ll catch up with you soon!