Did you first report this to the proper management ?
What is your companies rules for this.

Are you sure it was actually violated,

I would assume you first notified the proper management, and they did an investigation and found it was true.