Story 314
When the Coverup Becomes the Crime: A Cautionary Tale from KPMG
Last week, the CEO of KPMG Australia resigned without notice. While he wasn’t personally implicated in wrongdoing, how he handled it when others were, precipitated his demise.
KPMG partners were found to have inappropriately shared confidential client information internally. A whistleblower raised the alarm.
An internal investigation found nothing. An external legal review of that internal investigation also found nothing. Two investigations reached the same answer: nothing to see here.
But the whistleblower didn’t move along. Dissatisfied with both outcomes, they escalated their concerns to independent board members and others — triggering a third, expanded review that remains ongoing, with new evidence challenging the conclusions of the first two.
Three partners have now been sanctioned. A separate incident of the same conduct has since surfaced. ASIC, Australia’s corporate regulator, is now publicly investigating.
The CEO is gone. So is the national managing partner for audit.
This is a power story that plays out where institutions have more incentive to protect the powerful than to hear the truth.
When internal processes are designed to stay blind, external processes become necessary. That’s exactly why platforms like this one exist.
The firm has admitted its investigations “were not conducted with the necessary rigor” — which is a polished way of saying: we looked, we didn’t find, because we didn’t really want to find.
When a culture prioritizes protecting high-earning leaders over addressing legitimate concerns, internal reporting channels become tools of retaliation.
The whistleblower doesn’t just lose their case. They lose their standing, their credibility, sometimes their career. And the institution moves on, intact, until the next one comes along.
Sounds familiar?
Of the first stories posted on this site, the majority are about one firm. All point to the ways internal channels failed them.
Citi has spent years building a transformation narrative. The first female CEO of a major Wall Street bank. Commitments to diversity. A “speak-up” and “credible challenge” culture.
That’s exactly what KPMG’s Andrew Yates said as he walked out the door: “I have been committed to a speak-up culture in our firm. It is clear that in this case we have let ourselves down.”
The speak-up culture. The internal investigation. The external review. The clean bill of health. The whistleblower who wouldn’t go away.
The KPMG story is what happens at large institutions when the dollars are large enough, the leaders are senior enough, and the desire to find nothing is strong enough.
The lesson from KPMG is not that whistleblowers always win. It’s that they sometimes outlast the people who ignore them.
The third investigation — the one that actually found something — only happened because one person refused to accept “nothing to see here” as a final answer.
Every institution implicated in the stories on this site has a speak-up culture. A reporting hotline. A non-retaliation policy. A values statement.
The gap between those policies and the lived experience of the people who used them is precisely why this platform exists.
Policy says: your voice matters.
Lived reality says: here is what happens when you use it.
That gap is not an accident.
To anyone at Citi — or anywhere on Wall Street — reading this: the whistleblower in Sydney didn’t have a platform. They just had persistence. You have both.
The question for Citi’s leadership is simple: when the stories on this site are finally investigated properly, will you be the institution that acted — or the one that waited until it was too late?