Your SUPERVISOR, not the HR people, not the company owner, not your supervisor's supervisor. So they also claim they didn't know your supervisor was asking you to do illegal stuff. If they'd known, they'd have fixed it. So why didn't you tell them? Honestly, I see NO advantage in trying to take this anywhere else without trying to work this out by taking it beyond your supervisor, but within the company.