If he's violating HIPAA or something, then sure, name names. But if it's simply about the content of the blog, then his nomme de guerre should suffice.