Checkout data is the information collected when a customer completes a purchase, such as name, email address, phone number, billing details, shipping address, and order history. It may also include delivery instructions, account identifiers, and metadata about what was bought, when, and where it should be sent.
In cyber security, checkout data matters because it combines identity, contact, and transaction records in one place. That makes it valuable for fraud, account takeover, and targeted phishing, especially if attackers steal it from e-commerce platforms, payment flows, support tools, or poorly protected databases. Defenders reduce risk by minimizing stored fields, encrypting sensitive records, restricting access, logging queries, and separating payment processing from customer profiles. Even without payment card numbers, exposed checkout data can still reveal enough detail to impersonate customers or map their behavior.