Everyone around him knew and participated to some extent.
His postdocs (except the one who said no), his PhD students, and all his other co-authors.
They all knew and never said a word.
When Cornell was told, they made some pious noises and ignored it until it became too public.
Journals ignored all criticism until it became too public.
This is a system that does not police fraud.