A hospital and its security contractor are facing legal trouble over a brutal beating taken by a unit nurse at the hands of a mentally ill inpatient a year ago.