Transaction history is the record of activity on an account, such as payments, transfers, refunds, and timestamps. In cyber security, it is sensitive because it can reveal spending habits, counterparties, locations, device usage patterns, and the financial relationships between people or organizations. Even when no passwords are exposed, this kind of data can help an attacker profile a target.
Attackers may seek transaction history during social engineering, fraud, account takeover, or data-exfiltration attacks because it adds context for follow-up scams and identity theft. For example, a forged authority request may be used to convince a company to disclose records without breaching a system directly. Defenders should treat transaction history as protected personal and financial data, limit access by role, log every disclosure, and verify requests through independent channels before release.