St Mary of the Woods: Privacy Breach Exposes Records - OH
The privacy breach at St Mary of the Woods happened when staff compiled medical records for Resident #58's family member. The package contained everything the family requested about their relative. It also contained everything about Resident #63.
The family member discovered the error after reviewing the documents she received from the 36-bed facility on Detroit Road. Resident #63's date of birth, insurance information, diagnoses, and complete care plan were mixed in with her own relative's records.
State inspectors interviewed the family member on August 27 at 1:32 p.m. She confirmed receiving both residents' private information in a single package from the facility.
The Director of Nursing acknowledged the mistake during an interview 17 minutes earlier. She verified that Resident #58's medical record request had indeed included Resident #63's personal and clinical information when staff sent it from the facility.
The nursing director also confirmed she had notified Resident #63's family about the confidentiality breach and unauthorized release of their relative's private medical information.
Inspectors reviewed the actual medical record package the facility had sent to Resident #58's family member. The documents verified that Resident #63's private information and medical details were included in materials meant for a different family entirely.
The facility's own policy, dated May 2022, states that all medical records will be released with a valid request and in accordance with state and federal laws. The policy makes no mention of procedures to prevent mixing different residents' records during the compilation process.
Federal privacy regulations require nursing homes to maintain strict confidentiality of resident medical information. Facilities can only release records to authorized individuals with proper documentation. Accidentally sending one family another resident's complete medical file violates these protections.
The breach exposed Resident #63's most sensitive health information to strangers. Insurance details could enable identity theft. Diagnoses and care plans contain intimate details about medical conditions, treatments, and daily assistance needs that residents expect to remain private.
Medical record requests are routine at nursing homes. Families need documentation for insurance claims, legal proceedings, or transfers to other facilities. The process requires staff to carefully identify the correct resident, locate the appropriate files, and verify they're sending information only about the requested person.
St Mary of the Woods failed at each step. Staff either pulled the wrong records, mixed files from different residents, or failed to review the package before mailing it to the family.
The error suggests broader problems with the facility's record-keeping systems. Medical files for 36 residents should be clearly labeled and organized to prevent such confusion. Staff should have procedures to double-check packages before release.
The timing of the discovery matters. The family member had to review the documents herself to notice the error. Had she simply filed the papers without reading them, Resident #63's private information might have remained in the wrong hands indefinitely.
State inspectors investigated the breach as part of complaint number 2562366. They found the facility failed to ensure resident privacy and confidentiality of medical records, affecting one of two residents reviewed for medical record release.
The violation received a "minimal harm or potential for actual harm" designation. But privacy breaches can have lasting consequences. Once medical information reaches unauthorized people, facilities cannot retrieve or control it.
Resident #63's family learned their relative's most private health details had been shared with strangers through no fault of their own. They had not requested records. They had not authorized release. Their loved one's information simply ended up in the wrong package through staff carelessness.
The facility now must develop procedures to prevent similar breaches. But for Resident #63, the damage is done. Private medical information that should have remained confidential is now in the hands of people who have no right to see it.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for St Mary of the Woods from 2025-08-28 including all violations, facility responses, and corrective action plans.
Additional Resources
Data source: Official federal inspection data from the Centers for Medicare & Medicaid Services (CMS).
Editorial process: AI-synthesized regulatory data, reviewed for accuracy by our editorial team.
Professional review: All content reviewed by Christopher F. Nesbitt, Sr., NH EMT & BU-trained Paralegal.
Last verified: June 20, 2026 · Our methodology
ST MARY OF THE WOODS in AVON, OH was cited for violations during a health inspection on August 28, 2025.
The privacy breach at St Mary of the Woods happened when staff compiled medical records for Resident #58's family member.
Health inspections identify deficiencies that facilities must correct. Violations range from minor documentation issues to serious safety concerns. Review the full report below for specific details and facility response.