Zenflow Data Breach Exposes Social Security Numbers

The South San Francisco based medical device company, Zenflow, recently reported a data breach to state authorities in Massachusetts.

The breach was first disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Jan. 7, 2026, and impacted three Massachusetts residents. According to the disclosure, the exposed information included first and last names combined with Social Security numbers.

Zenflow's response

In response to the breach, Zenflow, Inc. has taken several steps to support those affected. Out of an abundance of caution, the company is offering complimentary identity monitoring services for 24 months through Cyberscout, a TransUnion company. This service includes credit monitoring, credit reports, and credit scores, with alerts sent to consumers when changes occur to their credit files. Affected individuals are encouraged to enroll in these services within 90 days of receiving the notification letter.

Zenflow, Inc. has also provided guidance on additional actions individuals can take to protect themselves, such as regularly reviewing account statements and credit histories, placing fraud alerts or credit freezes with major credit bureaus, and contacting the Federal Trade Commission or law enforcement if identity theft is suspected. The company has made a dedicated phone line available at 800-405-6108 for questions and further assistance.

Given the nature of the breach, individuals who believe they may be affected should remain vigilant for signs of suspicious activity on their financial accounts and consider enrolling in the free credit monitoring services provided.