I'd say home storage is more at risk even for a general attack if you're using retail hardware with default configurations, like a NAS -- it's easy to scan the entire internet for vulnerabilities. Plus it tends to be vulnerable even to non-traditional attacks like Bitcoin ransoms. Whereas cloud storage is custom and patched and up-to-date and monitored... your consumer hardware mostly isn't any of those.
And there's a huge distinction between retail corporations leaking CC#'s, vs cloud storage providers. Securing credit card numbers is not Target's core competency. While securing personal and corporate data is a core competency for major established cloud providers.
Nah, those general attacks require 2 steps. Getting past the router and finding the NAS.
Sure, you could pull off both exploits, but it's not really likely.
The most vulnerable to those attacks likely aren't operating NAS's in the first place. Very few people are (which decreases the likelihood of attack). I'd imagine most of us on HN are regularly patching all of our home hardware. That makes us far less likely to be susceptible to those sorts of general attacks.
If an attacker is looking for something juicy and general, they are far more likely to try and pull off a general attack against someone's laptop or phone. That's where the pool of users is much more broad.
And there's a huge distinction between retail corporations leaking CC#'s, vs cloud storage providers. Securing credit card numbers is not Target's core competency. While securing personal and corporate data is a core competency for major established cloud providers.