Records were provided to a contract nursing home ( CNH ) on a patient discharged to the CNH . A surgical schedule was mixed in with the records containing 26 patient 's full names , full social security numbers , and protected health information . ;