The victims may be able to circumvent the duty issue via the Civil Rights Act and the state-created danger doctrine.  The argument would be that PSU and its administrators created a dangerous situation when it allowed Sandusky access to university facilities with children when they were allegedly aware of his past actions.  This is not the easiest cause of action to prove, but may provide an avenue for recovery if there is not a duty to report under Pennsylvania law.