I think it depends on what information they have. If it involves telling the name of the person I believe it is ethical that the fraud investigator not include it in the report. If it involves wording that would implicate a specific person they should not include it. The fraud investigator can be sued if they specifically list a person by name. They could use the job title of a specific person. The fraud investigator is there to present the evidence and back it up with documentation. If they do not include something in the report because there is not sufficient evidence or accuse a person, it would not be ethical to include it.