Accordingly, auditors should also disclose in the report on the attestation engagement instances of fraud, illegal acts, or other noncompliance that are material to the subject matter or the assertion.
Auditors should disclose instances of illegal activities.
Auditors are never required to disclose instances of illegal activities.