Cloud providers may be storing sensitive customer data, without either party knowing it. But when a provider is breached, the data comes home to roost.