Personal information at risk as spying agencies tap the cloud