Having worked in medical reception for about 10 years, I can tell you that it is the receptionist's job to verify a caller's identity and that their is a signed consent for release of information that even specifies what kinds of information can be given to a particular person (i.e any info they ask for, or just their general well-being but no treatment specific info, etc.) When she transferred the call, the nurse was within reason to expect protocol had been followed. I'd imagine especially with such a high-profile patient, there'd be reasonable belief that all bases had been covered.

Not blaming the receptionist at all or anything like that because the DJs are the ones who caused all of this mess, but the nurse isn't really responsible. Their duties are strictly patient care.