I worked for several years at an 8-person MSP. The owner was adding web services. We built a dozen websites (owner was WordPress-centric), did management or revisions on others, and also did SEO. The owner had me put all client logins into an in-house password management tool. I'm starting to hear from my former clients there, frustrated because the owner sold the MSP to a larger company out of state, and they don't want to hire another web developer. The hardware techs can't find the website logins. The new owners are referring login questions to another company they own, who has no idea what to do. I emailed a VP--who I met once--at the new owners, offering to help. He did not respond. One of the clients who called me is experiencing his website being hacked, but he has no login. I'm not sure where to start with this problem?
update: The hardware techs do have the logins but are apparently refusing to allow clients to have Admin access, even for professional web development. The client who called me is still being hacked; used as a backlink dumpsite.
Sounds pretty awful. Management need to get in and get their chain of command sorted. Users don't need admin access, just author or editor.