A whistleblower flagged the arrangement in 2021. Five years later, the company is paying nearly $4.7 million to resolve those ...