Indeed. And handsome whistleblower bonuses (i.e. enough to retire on) should be paid to individuals who are in a position to report the company principals to appropriate authorities (with easily obtainable evidence of course), so that they can be dealt with accordingly.
Instead of just casually mentioning to others at the water cooler that this is what their client/employer was doing, as if it were just one of those things.