"MSPs are firms that other companies trust to store, process, and protect commercial data"
Apparently, they're not doing their job very well. They might want to start using some intrusion detection software, I hear that that is a thing these days.
Either that or they need to pay their personnel better and train them more often.