Three places for reporting academic misconducts.
1) Faculty Senator Committee/Provost Office Ethic Committee
2) University's General Counsel Office
3) Internal Audit Department
Any of them will be fine. But remeber to ask for protection of your identity. Document everything including conversation with anybody.