Any illegal or fraudulant activity uncovered should be handed to the police to investigate and prosecute, otherwise the legal firm may be liable as an accessory after the fact, and possible inclusion in any lawsuit. Depending on what they find they may be open to a class action on behalf of shareholders.
Unfortunately, there are things that are amoral and unethical, but not illegal. The lines can get very blurred.