The single cited study was done by FireEye, which sells security products and services. They have an incentive to exaggerate the problem, since their business depends on the existence of threats.
"...which contrasts with the precisely zero times one of industry’s top three providers reported a major breach since Amazon started the club in 2006."
The lack of reporting doesn't imply a lack of incidents. Since reporting breaches would result in negative publicity for both the cloud providers and their customers, we'd expect them to keep quiet.