Actually, as it potentially a source of liability for the company, reporting it to management if not merely acceptable but good for the management. On the other hand, firing the reporting party for reporting the incident is clearly and blatantly illegal.