They should have a program that offers a reward with immunity if you report someone that steals ip, classified info, etc. (that gets convicted)
I'm guessing there are people that know of activity, but don't want to say anything since they also might get arrested and/or they have no incentive to tell.
Make it similar to the IRS reward reporting tax fraud.
You don't need incentive for other co-workers to tell their management if they suspected this. Who want's their company to falter and lay off everyone?