If you have something to report, usually you are somehow involved. The company might then try to pin responsibility on you for doing the bad thing and trying to verbally blackmail them.
Normally this discussion arises before the bad thing has been done, or if you weren't involved and found out about it. If you in fact committed it on their behalf without telling them first, then you are actually the bad guy.