So I work in a small, 6 man operation that's part of a giant global corporation. One of my co-workers is breaking policy by having people come in fairly often to give him money or parts as a part of a machining business he runs on the side. Everyone else in office is turning a blind eye to it. I worry about retribution, but I'm considering saying something to my direct supervisor or to the person individually. Thoughts?