In 2015, more companies are using the cloud to provide services such as email, document management and authorisation mechanisms. Why not, it's cheap and the data is secure especially if it's using large providers, right? The issue with the cloud is people blindly trust that large providers will keep their data safe and if something is found they'll have the resources and expertise to swiftly fix it. I'll talk about a vulnerability I found with Google which allows anyone to retrieve discarded accounts and data. Then I'll finish by discussing Google's surprising responses to my bug bounty submission for this vulnerability.