Hackers access payment data by using scripts that are triggered once a user enters their information for payment. They wait for users to hit the payment button and then copy their credit card information entered on the website, making it easier for them to steal financial information.