And if something illegal has happened, non-disclosure agreements can't be enforced regarding disclosure of that activity. At least, not in the US.