The Journal Investigates reveals an internal audit found “significant risk” of “substantial financial loss”.