I was in a very uncomfortable spot once, working for a medical association that was breaking the law by not reporting to the state a doctor they had investigated and found to be unsafe in his practices. I had typed the letter to the state reporting the decision, per law, and the President of the association came roaring into my office, took the letter out of the Out tray, demanded the copies I'd filed away, and took them to personally shred in his office.
I went and got another job, but it still bothered me, because it concerned public safety--this doctor was still treating patients who had no clue, had his name in the Yellow Pages, etc. And of course because it was WRONG.
So I felt I should report it, but I was scared to death if I ratted the association out, they would sue the pants off me for violating confidentiality about the organization's dealings. They were very strong on that and lawsuits were always a topic of conversation.
Well, I happened to have gone to work for lawyers, and I asked hypothetically about the situation. They told me that hypothetically, it could be reported, although it might not be pleasant. I was still pretty leery, and finally remembered an old contact I had at the state, and she did me the favor--without asking any questions-- of looking into it, and she called back to tell me they were already on it. So my fanny was saved, and I didn't have to be a whistleblower.
I've had a bad feeling about organizations that are so secretive ever since.