While "your servers are vulnerable no matter on prem or cloud" is true - there are some sitautions in which the cloud has other risks I never considered until i

While "your servers are vulnerable no matter on prem or cloud" is true - there are some sitautions in which the cloud has other risks I never considered until it was an issue. We had a set of sites on a special hardened security wise anti=hack anti ddos platform... and when that cloud got hacked they got all of our stuff and everyone else's and put it all on the dark net I believe. This was apparently because one of their customers was a semi-high profile target.. We found out a couple days later when the credit card on file started being used around the world, and that card had only ever been used at 2 places. We were not notified by the company. We did read about it in a story a couple days later that named our hosting company in a sidenote when noting the one client that was hacked / defaced / exposed whatever. Sadly in this case we would of been better off with non-cloud, non-extra-secure hosting. As others have said, if it's connected it's vulnerable, I agree. There are different risks for different hosting situations.