r/msp•
Sea_Information6125

PSA: Keep an eye on your techs

This was a funny sequence of events for us.

We just onboarded a client a few weeks back, outgoing MSP was nice and working with us.

This office is full Unifi setup, much larger than our usual. A full multistory building, tons of access points, switches, firewalls etc.

Normally we take over the local controller for smaller offices but this was a huge office and this MSP has all of their clients managed as multiple sites in their cloud controller.

So normally when we take over in a situation like that, I just have them export the site so we can import it into our controller.

Well, I tried to import the site config and it said error expecting site config not backup file.

So I'm thinking, maybe they had a local controller after all.

Spun up a local controller, imported the backup, go to reset the shadow in mongo ... weird, there are a lot of admin users. Like pages and pages of them. Email addresses and everything. Whatever, I just need to get the config so I reset one of the admin user passwords.

Then I log into the controller so I can grab the config.....

There are hundreds and hundreds of sites of all of their clients in the backup. With all their information.

The funny thing is I specifically asked them for a site export. But whatever poor guy they told to give it to me must have not known better and gave me the full backup of their entire cloud controller. And inadvertently their entire client list.

So like the title says, keep an eye on your techs during off-boarding lol.

PS - of course I just exported the one site I needed and deleted the rest of that. I'm not an animal lol.

Posted Sep 12, 2026, 9:44 PM UTC

20456
Loading comments…