Accordingly, auditors should also disclose in the report on the attestation engagement instances of fraud, illegal acts, or other noncompliance that are material to the subject matter or the assertion.
Auditors are never required to disclose instances of illegal activities.