Grafton Oaks Nursing Center: Privacy Breach - OH
The resident who left with the wrong prescription was not the one it belonged to. The medication, a Lasix card, had been prescribed to Resident 82, a patient with acute myeloblastic leukemia, type two diabetes, atherosclerotic heart disease, and hypertension. Lasix, a diuretic, had been ordered at 40 milligrams daily for that resident's hypertension. Resident 82 had been admitted July 1 and discharged July 14. Inspectors noted that at the time of care, she had moderately impaired cognition and needed staff help with daily activities.
The mix-up surfaced three days after her discharge. On July 17, the facility opened an investigation after the family of Resident 81, the person who had gone home with the wrong medication card, called to report the error. The family told staff what had happened. They did not return the medication when asked.
That phone call is the only reason Grafton Oaks learned about the breach at all.
The administrator and director of nursing confirmed the sequence of events during an interview with inspectors on August 18. Both acknowledged that staff had accidentally sent Resident 82's medication card home with Resident 81 at discharge. Neither offered an explanation for how a labeled prescription card belonging to one patient ended up in another patient's discharge materials.
What the medication card contained, beyond the drug name and dosage, is not a small thing. A prescription card carries a resident's name and medical information. Sending it out the door with the wrong family means that family now holds documentation linking a specific person to a specific diagnosis and treatment. Resident 82 never consented to that. The facility's own HIPAA policy, reviewed by inspectors, states that protecting the confidentiality of resident health information is facility policy. The policy did not have a date on it.
Federal inspectors cited the facility for failing to maintain the confidentiality of a resident's private health information. The complaint, filed under iQIES Complaint Number 2582200, was investigated and confirmed. The level of harm was classified as minimal harm or potential for actual harm, the lower end of the federal scale. One of three residents reviewed for confidentiality was affected. The facility census at the time of inspection was 78 residents.
The classification of minimal harm does not erase what happened. A woman with leukemia was discharged from a nursing facility, and within days, a stranger's family was reading her name off a prescription card they had no business holding. The facility asked for it back. They said no.
There is no indication in the inspection record that Grafton Oaks took any steps to retrieve the medication or to notify Resident 82 that her health information had left the building in someone else's hands.
The inspection was conducted August 18, three weeks after the facility's own investigation identified the error.
Full Inspection Report
The details above represent a summary of key findings. View the complete inspection report for Grafton Oaks Nursing Center from 2025-08-18 including all violations, facility responses, and corrective action plans.
Download the official CMS inspection PDF from Medicare.gov
Additional Resources
Data source: This article is based on inspection data downloaded directly from the Centers for Medicare & Medicaid Services (CMS) via Medicare.gov. CMS releases inspection reports in bulk; we publish the findings as documented by state surveyors in the official Form CMS-2567 Statement of Deficiencies.
Plan of correction: The CMS report we receive does not include the facility's plan of correction. Facilities submit plans of correction separately to state survey agencies and those responses may not be reflected in CMS data at the time of publication. The absence of a plan of correction in our data does not mean one was not filed. Readers who want information about corrective steps taken are encouraged to contact the facility directly or their state survey agency.
Corrections may have occurred: Inspection reports reflect conditions observed on the date of the survey. Facilities may have implemented corrections, staffing changes, additional training, or other remediation since the report was issued. We report what CMS provides and encourage readers to seek current information from the facility.
Editorial process: Inspection findings are extracted from CMS source documents and synthesized using AI, reviewed for factual accuracy against the original report by our editorial team.
Professional review: All content reviewed by Christopher F. Nesbitt, Sr., NH EMT & BU-trained Paralegal.
Last verified: September 22, 2026 · Our methodology
GRAFTON OAKS NURSING CENTER in DAYTON, OH was cited for violations during a health inspection on August 18, 2025.
The resident who left with the wrong prescription was not the one it belonged to.
Health inspections identify deficiencies that facilities must correct. Violations range from minor documentation issues to serious safety concerns. Review the full report below for specific details and facility response.