Data leaks on cloud storage

[EggyRepublic]

Is it possible for certain sequences of actions to cause someone else to download your data stored on cloud servers, specifically OneDrive or Google Drive? Has such a bug ever existed in the past?

[spartaman64]

if they know your account and password yes ofc but otherwise i never heard of that happening

[Lurick]

I mean there is always the possibility of using the same password in multiple places and another site getting compromised and someone trying that password with your cloud storage service or just having a weak, commonly used, password on the storage with an email you use everywhere and no 2 Factor Authentication (2FA) used then someone can get in and download your data but as far as someone just going to their account and downloading data from someone else, that's a negative. They have tons of data stored on the services and if there was an exploit that allowed someone to steal data it would definitely hit the headlines pretty quick. There is always a possibility of a Day0 going undiscovered for a long time and then cropping up one day and being used for nefarious purposes but generally that's never going to impact most end users and if mass exfiltration of data was detected any cloud provider worth their salt is going to catch it pretty quickly and put a stop to it.

 

Outside of a targeted attack at a high profile person, nobody is really going to care about trying to steal a persons data unless they can steal it and make money off of it easily, ex: ransomware

 

tl;dr: Unless you use easy to guess passwords and no 2FA then chances of anything happening are really really slim.