Dozens of staff members reportedly accessed the medical records of a three-year-old boy injured in a crocodile pit