Hey @offpeakdesign,
Glad you reached out!
When a site is hacked, you may need to find out what exactly was compromised in the invasion, like if the hackers were able to access your database or access your user’s data, for example.
When using GiveWP you have some sensitive data that is stored on your site, like Donor’s name, email, billing address, and the donation meta, that allows you to see the payment key, the donor’s IP, and the transaction ID. I say this data is sensitive because a hacker could use this info to do some social engineering, using their data to access their account on your site or on a third-party service.
Regarding the payment, all that information is processed on the payment gateway, in your case, I think it’s Stripe, correct? All the card details are sent directly to Stripe, who processes it and then get back to your site with the information. No credit cards are saved on your site.
Hope it clarifies!
Please let us know if you have further questions on this or need any additional assistance!
