The courts?

Google “examples of GPL enforced in court” for a few

Yeah it requires finding out, but how do you prove a whistleblower broke their NDA?