It’s not the prank call - it’s that the source was from inside the NFL, a coach’s son, and the optics of poor security of personally identifiable information. Do they also have player’s SS # in their databases? Perhaps for background checks there might be a lot of sensitive data in a coach’s hands, and this incident creates suspicion about data security. Not to mention it is super embarrassing for a league that struggles with PR in personnel matters.