My theory
Is that one party legitimately had these photos on their phone and that phone developed a fault so was returned to the store.
The store then either repaired the phone or not, but then sold it on without wiping the data off it.
No cloud storage to blame, but because "OMG!! cloud" (ie something that they don't understand and is someone else's responsibility), that's where they point the finger.
Biting the hand that feeds IT
