Cloud providers may be storing sensitive customer data, without either party knowing it. But when there's a breach, the data comes home to roost.