A forged PhD reached a listed boardroom. The real question is how?