Donor metadata is the identifying information attached to a contribution, such as an email address, name, payment reference, billing fragment, or transaction record. It is not always the donation amount itself; it is the context that tells an organization who donated and how the payment was processed.
In cyber security, donor metadata matters because it can expose identity clues even when financial data is limited. Attackers use it for phishing, social engineering, account correlation, and targeting people linked to sensitive causes. If donor records are leaked from a payment platform, the harm can extend beyond money loss to privacy and personal safety. Defenders reduce this risk with access control, strong authentication, retention limits, and data minimization so each account and database table reveals as little as possible.