The California Office of the Attorney General reported that Woodruff-Sawyer & Co. experienced a data breach on January 20, 2024, due to unauthorized access via SIM swapping. The breach affected an unspecified number of individuals, and personal information was downloaded, although the exact types of information compromised are not detailed.

The Washington State Office of the Attorney General reported a data breach involving Woodruff Sawyer & Co. on November 10, 2020. The breach, which involved unauthorized access to employee email accounts, occurred between March 2, 2020, and March 3, 2020, affecting 2,393 Washington residents. The compromised information included names, full dates of birth, and medical information.