What difference does it make if your web server or web application is on the cloud or on hardware in your rack space?
BOTH need Internet and TCPIP access, and both have all your customers over the Internet somewhere.
They can hack your web server and shut you down locally or over cloud. The code for these attacks is exactly the same.
Who has more resources to fight them and fix the issue, individual companies and their few administrators or a big vendor with thousands of administrators, security specialists and other employees?
The whole Internet is a stinking cesspool of malware and hackers and it doesn’t matter where the data is stored, but rather that the data needs to have access to the Internet.
Unless, of course, we want to go back to catalog orders by mail and over the phone.
Pandora’s Box was opened some time ago, and we can’t put all the bad back in.
I never said the Internet was evil. I said certain personal information should not be stored in the cloud *whenever possible*. The price of convenience is an increase in risk.