Hillary Clinton email controversy

Hillary Clinton holding a BlackBerry phone in 2009

Prior to her appointment as Secretary of State in 2009, Clinton and her circle of friends and colleagues communicated via BlackBerry phones.[18] State Department security personnel suggested this would pose a security risk during her tenure.[19] The email account used on Clinton's BlackBerry was then hosted on a private server in the basement of her home in Chappaqua, New York, but that information was not disclosed to State Department security personnel or senior State Department personnel.[20]

Setting up a secure desktop computer in her office was suggested, but Clinton was unfamiliar with their use[21] and opted for the convenience of her BlackBerry,[22] not the State Department and government protocol of a secured desktop computer. Efforts to find a secure solution were abandoned by Clinton,[23] and she was warned by State Department security personnel about the vulnerability of an unsecured BlackBerry to hacking.[24] She affirmed her knowledge of the danger, and was reportedly told that the Bureau of Diplomatic Security had obtained intelligence about her vulnerability while she was on a trip to Asia, but continued to use her BlackBerry outside her office.[18]

A screenshot of the default Outlook Web App login page that is displayed when navigating to Clinton's email service

At the time of Senate confirmation hearings on Hillary Clinton's nomination as Secretary of State, the domain names clintonemail.com, wjcoffice.com, and presidentclinton.com were registered to Eric Hoteham,[25] with the home of Clinton and her husband in Chappaqua, New York, as the contact address.[26][27] The domains were pointed to a private email server that Clinton (who never had a state.gov email account) used to send and receive email, and which was purchased and installed in the Clintons' home for her 2008 presidential campaign.[28]

The email server was located in the Clintons' home in Chappaqua, New York, from January 2009 until 2013, when it was sent to a data center in New Jersey before being handed over to Platte River Networks, a Denver-based information technology firm that Clinton hired to manage her email system.[29][30][31][32][33]

The server itself runs a Microsoft Exchange 2010[34][35] server with access to emails over the internet being delivered by Outlook Web App. The web page is secured with a TLS certificate to allow information to be transmitted securely when using the website. However, for the first two months of its use – January 2009 through March 29, 2009 – the web page was reportedly not secured with a TLS certificate, meaning that information transmitted using the service was unencrypted and may have been vulnerable to interception.[18]

As early as 2009, officials with the National Archives and Records Administration (NARA) expressed concerns over possible violations of normal federal government record-keeping procedures at the State Department under then-Secretary Clinton.[36]

In December 2012, near the end of Clinton's tenure as Secretary of State, a nonprofit group called Citizens for Responsibility and Ethics in Washington, or CREW, filed a FOIA request seeking records about her email. CREW received a response in May 2013: "no records responsive to your request were located."[18] Emails sent to Clinton's private clintonemail.com address were first discovered in March 2013, when a hacker named "Guccifer" widely distributed emails sent to Clinton from Sidney Blumenthal, which Guccifer obtained by illegally accessing Blumenthal's email account.[37][38][39] The emails dealt with the 2012 Benghazi attack and other issues in Libya and revealed the existence of her clintonemail.com address.[37][38][39]

Blumenthal did not have a security clearance when he received material from Clinton that has since been characterized as classified by the State Department.[40][41]

In the summer of 2014, lawyers from the State Department noticed a number of emails from Clinton's personal account, while reviewing documents requested by the House Select Committee on Benghazi. A request by the State Department for additional emails led to negotiations with her lawyers and advisors. In October, the State Department sent letters to Clinton and all previous Secretaries of State back to Madeleine Albright requesting emails and documents related to their work while in office. On December 5, 2014, Clinton lawyers delivered 12 file boxes filled with printed paper containing more than 30,000 emails. Clinton withheld almost 32,000 emails deemed to be of a personal nature.[18] Datto, Inc., which provided data backup service for Clinton's email, agreed to give the FBI the hardware that stored the backups.[42]

As of May 2016, no answer had been provided to the public as to whether 31,000 emails deleted by Hillary Clinton as personal have been or could be recovered.[43]

A March 2, 2015 New York Times article broke the story that the Benghazi panel had discovered that Clinton exclusively used her own private email server rather than a government-issued one throughout her time as Secretary of State, and that her aides took no action to preserve emails sent or received from her personal accounts as required by law.[44][45][46] At that point, Clinton announced that she had asked the State Department to release her emails.[47] Some in the media labeled the controversy "emailgate."[48][49][50]

In May 2016, the Department's Office of the Inspector General Steve A. Linick released an 83-page report about the State Department's email practices.[59][60][61] The Inspector General was unable to find evidence that Clinton had ever sought approval from the State Department staff for her use of a private email server, determining that if Clinton had sought approval, Department staff would have declined her setup because of the "security risks in doing so."[59] Aside from security risks, the report stated that "she did not comply with the Department's policies that were implemented in accordance with the Federal Records Act."[62] Each of these findings contradicted what Clinton and her aides had been saying up to that point.[63][64][65] The report also stated that Clinton and her senior aides declined to speak with the investigators, while the previous four Secretaries of State did so.[59]

The report also reviewed the practices of several previous Secretaries of State and concluded that the department's record keeping practices were subpar for many years.[59] The Inspector General criticized Clinton's use of private email for Department business, concluding that it was "not an appropriate method" of document preservation and did not follow department policies that aim to comply with federal record laws. The report also criticized Colin Powell, who used a personal email account for business, saying that this violated some of the same Department policies.[59] State Department spokesman Mark Toner said the report emphasized the need for federal agencies to adapt "decades-old record-keeping practices to the email-dominated modern era" and said that the Department's record-retention practices had been improved under the current Secretary of State John F. Kerry, Clinton's successor.[59] The report also notes that the rules for preserving work-related emails were updated in 2009.[66]

Inspector General Linick wrote that he "found no evidence that staff in the Office of the Legal Adviser reviewed or approved Secretary Clinton's personal system," and also found that multiple State employees who raised concerns regarding Clinton's server were told that the Office of the Legal Adviser had approved it, and were further told to "never speak of the Secretary's personal email system again."[67][68][69][19]

Clinton campaign spokesman Brian Fallon issued a statement saying: "The report shows that problems with the State Department's electronic record-keeping systems were long-standing" and that Clinton "took steps that went much further than others to appropriately preserve and release her records."[59] However, the Associated Press said, "The audit did note that former Secretary of State Colin Powell had also exclusively used a private email account. ... But the failings of Clinton were singled out in the audit as being more serious than her predecessor."[70] The report stated that "By Secretary Clinton's tenure, the department's guidance was considerably more detailed and more sophisticated, Secretary Clinton's cybersecurity practices accordingly must be evaluated in light of these more comprehensive directives."[70]

In 2008, before Hillary Clinton became Secretary of State, Justin Cooper, a longtime aide to Clinton's husband, former President Bill Clinton, managed the system. Cooper had no security clearance or expertise in computer security.[71] Later, Bryan Pagliano, the former IT director for Clinton's 2008 presidential campaign, was hired to maintain their private email server while Clinton was Secretary of State.[72][73] Pagliano had invoked the Fifth Amendment during congressional questioning about Clinton's server. In early 2016, he was granted immunity by the Department of Justice in exchange for cooperation with prosecutors.[74] A Clinton spokesman said her campaign was "pleased" Pagliano was now cooperating with prosecutors.[75] As of May 2016, the State Department remained unable to locate most of Pagliano's work-related emails from the period when he was employed by that department under Secretary Clinton.[76]

Security experts such as Chris Soghoian believe that emails to and from Clinton may have been at risk of hacking and foreign surveillance.[77] Marc Maiffret, a cybersecurity expert, said that the server had "amateur hour" vulnerabilities.[78] For the first two months after Clinton was appointed Secretary of State and began accessing mail on the server through her BlackBerry, transmissions to and from the server were apparently not encrypted. On March 29, 2009, a digital certificate was obtained which would have permitted encryption.[18]

Former Director of the Defense Intelligence Agency Michael T. Flynn,[79] former United States Secretary of Defense Robert Gates,[80][81] and former deputy director of the Central Intelligence Agency Michael Morell[82][83] have said that it is likely that foreign governments were able to access the information on Clinton's server. Michael Hayden, former Director of the National Security Agency, Principal Deputy Director of National Intelligence, and Director of the Central Intelligence Agency said "I would lose all respect for a whole bunch of foreign intelligence agencies if they weren't sitting back, paging through the emails."[84]

Clinton's server was configured to allow users to connect openly from the Internet and control it remotely using Microsoft's Remote Desktop Services.[78]

It is known that hackers were aware of Clinton's non-public email address as early as 2011.[85] Secretary Clinton and her staff were aware of hacking attempts in 2011, and were reportedly worried about them.[86]

In 2012, according to server records, a hacker in Serbia scanned Clinton's Chappaqua server at least twice, in August and in December 2012. It was unclear whether the hacker knew the server belonged to Clinton, although it did identify itself as providing email services for clintonemail.com.[78] During 2014, Clinton's server was the target of repeated intrusions originating in Germany, China, and South Korea. Threat monitoring software on the server blocked at least five such attempts. The software was installed in October 2013, and for three months prior to that, no such software had been installed.[87][88]

According to Pagliano, security logs of Clinton's email server showed no evidence of successful hacking.[89] The New York Times reported that "forensic experts can sometimes spot sophisticated hacking that is not apparent in the logs, but computer security experts view logs as key documents when detecting hackers," adding the logs "bolster Mrs. Clinton's assertion that her use of a personal email account ... did not put American secrets into the hands of hackers or foreign governments."[77][89][90]

In 2013, Romanian hacker Marcel Lehel Lazăr (aka "Guccifer") distributed private memos from Sidney Blumenthal to Clinton on events in Libya that he had acquired by hacking Blumenthal's email account.[91][92] In 2016, Lazăr was extradited from Romania to the U.S. to face unrelated federal charges related to his hacking into the accounts of a number of high-profile U.S. figures,[93] pleading guilty to these charges.[94][95] While detained pending trial, Lazăr claimed to the media that he had successfully hacked Clinton's server, but provided no proof of this claim.[96] Officials associated with the investigation told the media that they found no evidence supporting Lazăr's assertion,[97] and Clinton press secretary Brian Fallon said "There is absolutely no basis to believe the claims made by this criminal from his prison cell."[98][99] FBI Director James Comey later stated in a congressional hearing that Guccifer admitted his claim was a lie.[100]

According to security researchers at Secureworks the email leak was caused by Threat Group-4127, later attributed to Fancy Bear, a unit that targets governments, military, and international non-governmental organizations. The researchers report moderate confidence that the unit gathers intelligence on behalf of the Russian government.[101]

A June 29, 2015, memorandum from the Inspector General of the State Department, Steve A. Linick, said that a review of the 55,000-page email release found "hundreds of potentially classified emails."[124] A July 17, 2015, follow-up memo, sent jointly by Linick and the Intelligence Community (IC) inspector general, I. Charles McCullough III, to Under Secretary of State for Management Patrick F. Kennedy, stated that they had confirmed that several of the emails contained classified information that was not marked as classified, at least one of which was publicly released.[124]

On July 24, 2015, Linick and McCullough said they had discovered classified information on Clinton's email account,[125] but did not say whether Clinton sent or received the emails.[125] Investigators from their office, searching a randomly chosen sample of 40 emails, found four that contained classified information that originated from U.S. intelligence agencies, including the Central Intelligence Agency (CIA) and the National Security Agency (NSA).[125] Their statement said that the information they found was classified when sent, remained so as of their inspection, and "never should have been transmitted via an unclassified personal system."[125]

In a separate statement in the form of a letter to Congress, McCullough said that he had made a request to the State Department for access to the entire set of emails turned over by Clinton, but that the Department rejected his request.[125][126] The letter stated that none of the emails were marked as classified, but because they included classified information they should have been marked and handled as such, and transmitted securely.[126]

On August 10, 2015, the IC inspector general said that two of the 40 emails in the sample were "Top Secret/Sensitive Compartmented Information" and subsequently given classified labels of "TK" (for "Talent Keyhole," indicating material obtained by aerial or space-based imagery sources and NOFORN).[127] One is a discussion of a news article about a U.S. drone strike operation.[127] The second, he said, either referred to classified material or else was "parallel reporting" of open-source intelligence, which might still be classified by the government "owning agency" that sourced the information by secret means even though the same information was also available in the public domain.[127][128][129] Clinton's presidential campaign and the State Department disputed the letter, and questioned whether the emails had been over-classified by an arbitrary process. According to an unnamed source, a secondary review by the CIA and the National Geospatial-Intelligence Agency endorsed the earlier inspectors general findings concluding that the emails (one of which concerned North Korea's nuclear weapons program) were "Top Secret" when received by Clinton through her private server in 2009 and 2011, a conclusion also disputed by the Clinton campaign.[130]

The IC inspector general issued another letter to Congress on January 14, 2016. In this letter he stated that an unnamed intelligence agency had made a sworn declaration that "several dozen emails [had been] determined by the IC element to be at the CONFIDENTIAL, SECRET, and TOP SECRET/SAP levels." Other intelligence officials added that the several dozen were not the two emails from the previous sample and that the clearance of the IC inspector general himself had to be upgraded before he could learn about the programs referenced by the emails.[131][132][133] NBC News reported on January 20, 2016, that senior American officials described these emails as "innocuous" because—although they discussed the CIA drone program that is technically classified TOP SECRET/SAP—the existence of the CIA drone program had been widely known and discussed in the public domain for years. These officials characterized the IC inspector general as unfair in how he had handled the issue.[134]

On January 29, 2016, the State Department announced that 22 documents from Clinton's email server would not be released because they contained highly classified information that was too sensitive for public consumption. At the same time, the State Department announced that it was initiating its own investigation into whether the server contained information that was classified at the time it was sent or received.[135]

In February 2016, State Department IG Linick addressed another report to Under Secretary of State Kennedy, stating his office had also found classified material in 10 emails in the personal email accounts of members of former Secretary Condoleezza Rice's staff and in two emails in the personal email account of former Secretary of State Colin Powell.[136][137] None of the emails were classified for intelligence reasons.[138] PolitiFact found a year earlier that Powell was the only former secretary of state to use a personal email account.[139] In February 2016, Clinton's campaign chairman issued a statement claiming that her emails, like her predecessors,' were "being inappropriately subjected to over-classification."[136]

The State Department and Intelligence Community (IC) inspector generals' discovery of four emails containing classified information, out of a random sample of 40, prompted them to make a security referral to the FBI's counterintelligence office, to alert authorities that classified information was being kept on Clinton's server and by her lawyer on a thumb drive.[125][126] As part of the FBI's Midyear investigation,[140] at the request of the IC inspector general, Clinton agreed to turn over her email server to the U.S. Department of Justice, as well as thumb drives containing copies of her work-related emails. Other emails were obtained by the United States House Select Committee on Benghazi from other sources, in connection with the committee's inquiry. Clinton's own emails are being made public in stages by the State Department on a gradual schedule.[141][142][143]

The New York Times ran a front-page story on July 24, 2015, with the headline "Criminal Inquiry Sought In Clinton's Use of Email," with the lead sentence stating, "Two inspectors general have asked the Justice Department to open a criminal investigation into whether Hillary Rodham Clinton mishandled sensitive government information on a private email account she used as secretary of state, senior government officials said Thursday."[144] Shortly after the publication of the story, the Inspectors General of the Intelligence Community and the Department of State issued a statement clarifying, "An important distinction is that the IC IG did not make a criminal referral - it was a security referral made for counterintelligence purposes."[145] The Times later made two corrections, first that Clinton was not a specific target of the referral, then later that the referral was not "criminal" in nature.[146][147][144]

Clinton's IT contractors turned over her personal email server to the FBI on August 12, 2015,[33] as well as thumb drives containing copies of her emails.[148][149]

In a letter describing the matter to Senator Ron Johnson, Chairman of the Senate Homeland Security Committee, Clinton's lawyer David E. Kendall said that emails, and all other data stored on the server, had earlier been erased prior to the device being turned over to the authorities, and that both he and another lawyer had been given security clearances by the State Department to handle thumb drives containing about 30,000 emails that Clinton subsequently also turned over to authorities. Kendall said the thumb drives had been stored in a safe provided to him in July by the State Department.[150]

On August 20, 2015, U.S. District Judge Emmet G. Sullivan stated that Hillary Clinton's actions of maintaining a private email server were in direct conflict with U.S. government policy. "We wouldn't be here today if this employee had followed government policy," he said, and ordered the State Department to work with the FBI to determine if any emails on the server during her tenure as Secretary of State could be recovered.[151][152][153]

Platte River Networks, the Denver-based firm that managed the Clinton server since 2013, said it had no knowledge of the server being wiped. "Platte River has no knowledge of the server being wiped," company spokesman Andy Boian told the Washington Post. "All the information we have is that the server wasn't wiped."[154] When asked by the Washington Post, the Clinton campaign declined to comment.[154]

In September 2015, FBI investigators were engaged in sorting messages recovered from the server.[155] In November 2015, the FBI expanded its inquiry to examine whether Clinton or her aides jeopardized national security secrets, and if so, who should be held responsible.[156][157]

Conflicting media sources sized the FBI investigation from 12[158] to 30 agents[159] as of March 2016.

In May 2016, FBI Director James Comey said he was "not familiar with the term 'security inquiry'" as the Clinton campaign was characterizing the probe, adding that the word investigation is "in our name" and "We're conducting an investigation ... That's what we do. That's probably all I can say about it."[160][161] Comey noted in his 2018 memoir that he did not publicly contradict Clinton's characterization of the investigation as a "security inquiry" while it was underway[162] despite being directly prompted by a reporter to do so in May 2016.[161] In April 2017 it became known that the FBI had, in fact, opened a criminal investigation on July 10, 2015, telling The New York Times they had received a "criminal referral," although the following day they issued a public statement: "The department has received a referral related to the potential compromise of classified information. It is not a criminal referral."[163]

In late June 2016, it was reported that Bill Clinton met privately with Attorney General Loretta Lynch on her private plane on the tarmac at Phoenix Sky Harbor International Airport. Officials indicated that the 30 minute meeting took place when Clinton became aware that Lynch's plane was on the same tarmac at the airport. When the meeting became public, Lynch stated that it was "primarily social" and "there was no discussion of any matter pending for the department or any matter pending for any other body." Lynch was criticized for her involvement in the meeting and was called on by some critics to recuse herself from involvement in the FBI's investigation of the email case. In response, she stated "The F.B.I. is investigating whether Mrs. Clinton, her aides or anyone else broke the law by setting up a private email server for her to use as secretary of state," but "the case will be resolved by the same team that has been working on it from the beginning" and "I will be accepting their recommendations."[164][165][166]

On July 1, 2016, the New York Times reported in the name of a "Justice Department official" that Attorney General Loretta Lynch will accept "whatever recommendation career prosecutors and the F.B.I. director make about whether to bring charges related to Hillary Clinton's personal email server."[164]

Clinton maintained she did not send or receive any confidential emails from her personal server. In a Democratic debate with Bernie Sanders on February 4, 2016, Clinton said, "I never sent or received any classified material." In a Meet the Press interview on July 2, 2016, she stated: "Let me repeat what I have repeated for many months now, I never received nor sent any material that was marked classified."[167][168][169]

On July 5, 2016, FBI Director Comey announced in a statement he read to press and television reporters at FBI headquarters in Washington, DC, that the FBI had completed its investigation and was referring it to the Justice Department with the recommendation "that no charges are appropriate in this case."[170][171][172] He added, "Although there is evidence of potential violations of the statutes regarding the handling of classified information, our judgment is that no reasonable prosecutor would bring such a case."[170][171]

With regard to mishandling of classified information, Comey said, "there is evidence that they [Clinton and her team] were extremely careless in their handling of very sensitive, highly classified information." The investigation found 110 emails that should have been regarded as classified at the time they were sent; another 2,000 emails were retroactively classified which means they were not classified at the time they were sent.[170][173] Comey said that "any reasonable person in Secretary Clinton's position, or in the position of those government employees with whom she was corresponding ... should have known that an unclassified system was no place for that conversation."[174][175]

The FBI learned that Clinton used her personal email extensively while outside the United States, both sending and receiving work-related emails in the territory of sophisticated adversaries. The FBI did not find "direct evidence that Secretary Clinton's personal e-mail domain ... was successfully hacked;" they assessed it "possible that hostile actors gained access" to it.[170][172] Investigators found that State Department employees often used private emails to conduct business. Comey noted, "We also developed evidence that the security culture of the State Department in general, and with respect to use of unclassified e-mail systems in particular, was generally lacking in the kind of care for classified information found elsewhere in the government."[176]

On July 6, 2016, Lynch confirmed that the investigation into Hillary Clinton's use of private email servers while secretary of state would be closed without criminal charges.[177]

On July 10, 2016, Jason Chaffetz and chairman Bob Goodlatte referred Clinton to the U.S. attorney for the District of Columbia to investigate whether Clinton lied to congress about her use of a private email server.[178][179]

The New York Times reported in April 2017 that during the investigation the FBI was provided documents acquired by Dutch intelligence hackers which had previously been stolen by Russian intelligence. The classified documents were purported to be written by a Democratic operative who asserted Lynch would not allow the Clinton investigation to go too far, though it was not clear if the writer actually had insight into Lynch's thinking. The Times reported the documents raised concerns by Comey that if Lynch announced the closure of the investigation, and Russia subsequently released the document, it would cause some to suspect political interference. This reportedly led Comey, a longtime Republican, to decide to announce the closure himself, though some in the Obama Justice Department were skeptical of this account. In June 2021 it became known that the Trump Justice department had acquired by court order the phone logs of the four Times reporters who had written the article together, as part of a leak investigation.[180][181][182]

In early October 2016, FBI criminal investigators working on a case involving former Congressman Anthony Weiner sending sexually explicit texts to a fifteen-year-old girl discovered emails from Weiner's estranged wife, Huma Abedin, vice chair of Hillary Clinton's 2016 presidential campaign, that they considered potentially relevant to the Clinton server investigation. FBI officials reportedly decided to disclose the development despite its potential effect on the pending presidential election to preempt the possibility that it would be leaked in another way.[183]

On October 28, 2016, Comey informed Congress that "in connection with an unrelated case, the FBI has learned of the existence of emails that appear pertinent to the investigation." He said the FBI will take "appropriate investigative steps designed to allow investigators to review these emails to determine whether they contain classified information, as well as to assess their importance to our investigation." He added that the FBI "cannot yet assess whether or not this material may be significant."[184] The FBI obtained a new search warrant to allow them to review Abedin's emails.[183]

Comey informed Congress of this additional investigation despite having been advised by Justice Department officials that such an announcement would violate department policies and procedures, including a policy not to comment on investigations close to an election.[185] Comey later explained, in a letter to FBI employees, "We don't ordinarily tell Congress about ongoing investigations, but here I feel an obligation to do so given that I testified repeatedly in recent months that our investigation was completed." Law enforcement sources added that he feared he would be accused of concealing relevant information if he did not disclose it.[185]

News of this renewed investigation being revealed shortly before the U.S. presidential election led to the announcement being described as an "October surprise,"[186] and prompted statements from both the Democratic and Republican campaigns. Donald Trump repeated his characterization that Hillary Clinton's email usage as secretary of state was "worse than Watergate."[187][188] Clinton called for the FBI to immediately release all information about the newly discovered emails and said she was confident the FBI would not change its earlier conclusion that there is no basis for criminal prosecution.[189] Senator Dianne Feinstein (D-CA) said she was "shocked" by the letter, saying it "played right into the political campaign of Donald Trump."[185]

On November 6, in another letter to Congress, Comey stated that, after working "around the clock" to review all of the newly discovered emails, the FBI had not changed the conclusion it reached in July.[190][191][192] An unnamed government official added that the newly discovered emails turned out to be either personal or duplicates of emails previously reviewed, and that Comey's letter represents a conclusion of the investigation.[193] The following day, stock and currency markets around the world surged in response.[194][195][196]

On November 12, during a conference call to top donors, Hillary Clinton attributed her presidential election loss to Comey's announcements, saying they stopped her momentum.[197] In January 2017, the US Justice Department started an investigation of Comey's announcements.[198] A 2019 study found that Comey's letter substantially increased Trump's probability of winning the 2016 election.[199]

According to Comey's June 8, 2017, testimony to the Senate Intelligence Committee, then-Attorney General Loretta Lynch had asked him to downplay the investigation into Clinton's emails by calling it a "matter" rather than an investigation. He said the request "confused and concerned" him. He added that Lynch's tarmac meeting with Bill Clinton also influenced his decision to publicly announce the results of the FBI probe.[200][201][202]

On June 23, 2017, several members of the Senate Judiciary Committee opened a bipartisan inquiry into whether former Attorney General Lynch interfered in the FBI's investigation into Hillary Clinton's use of a private email server.[203][204]

On July 7, 2016, the State Department resumed its review of whether classified information had been mishandled. The review had been suspended until the completion of the Justice Department investigation.[205][206] The United States Department of State finished its investigation in September 2019, citing 588 security violations. The review found that 38 current and former State Department officials – some of whom may be punished – were culpable of mishandling classified information, but in 497 cases the culpability could not be established. The material was considered classified then or later, but none of the violations involved information marked classified. The investigation found Clinton's use of personal email server increased the risk of compromising State Department information, but "there was no persuasive evidence of systemic, deliberate mishandling of classified information".[207][208]

The Inspector General of the Department of Justice (IG) launched an investigation into how the DOJ and FBI had handled the investigation into Clinton's email. On June 14, 2018, the IG issued a report that was highly critical of Comey's actions.[16] Regarding his July press conference, in which he criticized Clinton even while announcing the investigation was over, the IG said it was "extraordinary and insubordinate for Comey to conceal his intentions (about the press conference) from his superiors," and that "we found none of his reasons to be a persuasive basis for deviating from well-established Department policies."[209] Comey's October decision to send a letter notifying Congress that the investigation had been re-opened one week before the election was described as "ad-hoc" and "a serious error in judgment."[209] However, in June 2018 the IG concluded that the decision to not prosecute Clinton was not affected by bias and "was consistent with the Department’s historical approach in prior cases under different leadership, including in the 2008 decision not to prosecute former Attorney General Alberto Gonzales for mishandling classified documents."[210][211]

The IG report also commented on "highly classified information" in a purported Russian intelligence document obtained by the FBI that included an unconfirmed allegation that Attorney General Loretta Lynch assured a Clinton staffer that she would prevent the FBI investigation from digging too deeply into Clinton's affairs. The FBI long considered the document unreliable and a possible forgery, and Comey told IG investigators he knew the information was not true.[212] The IG report stated: "Comey said that he became concerned that the information about Lynch would taint the public's perception of the [Clinton] investigation if it leaked, particularly after DCLeaks and Guccifer 2.0 began releasing hacked emails in mid-June 2016," explaining why Comey chose to bypass Lynch and deputy AG Sally Yates to announce the FBI investigation findings himself.[213] The Washington Post also stated that "current and former officials" told them that Comey relied on the questionable document in making his July decision to announce on his own without his superiors approval that the investigation was over.[212]

According to the New York Times, if Clinton was a recipient of classified emails, "it is not clear that she would have known that they contained government secrets, since they were not marked classified."[108][125] The newspaper reported that "most specialists believe the occasional appearance of classified information in the Clinton account was probably of marginal consequence".[28] Steven Aftergood, director of the Project on Government Secrecy at the Federation of American Scientists, said that inadvertent "spillage" of classified information into an unclassified realm is a common occurrence.[28]

Reuters' August 2015 review of a set of released emails found "at least 30 email threads from 2009, representing scores of individual emails," which include what the State Department identifies as "foreign government information," defined by the U.S. government as "any information, written or spoken, provided in confidence to U.S. officials by their foreign counterparts." Although unmarked, Reuters' examination appeared to suggest that these emails "were classified from the start."[108] J. William Leonard, a former director of the NARA Information Security Oversight Office, said that such information is "born classified" and that "[I]f a foreign minister just told the secretary of state something in confidence, by U.S. rules that is classified at the moment it's in U.S. channels and U.S. possession."[108] According to Reuters, the standard U.S. government nondisclosure agreement "warns people authorized to handle classified information that it may not be marked that way and that it may come in oral form." The State Department "disputed Reuters' analysis" but declined to elaborate.[108]

The Associated Press reported, "Some officials said they believed the designations were a stretch—a knee-jerk move in a bureaucracy rife with over-classification."[127] Jeffrey Toobin, in an August 2015 New Yorker article, wrote that the Clinton email affair is an illustration of overclassification, a problem written about by Senator Daniel Patrick Moynihan in his book Secrecy: The American Experience.[214] Toobin writes that "government bureaucracies use classification rules to protect turf, to avoid embarrassment, to embarrass rivals—in short, for a variety of motives that have little to do with national security."[214] Toobin wrote that "It's not only the public who cannot know the extent or content of government secrecy. Realistically, government officials can't know either—and this is Hillary Clinton's problem. Toobin noted that "one of Clinton's potentially classified email exchanges is nothing more than a discussion of a newspaper story about drones" and wrote: "That such a discussion could be classified underlines the absurdity of the current system. But that is the system that exists, and if and when the agencies determine that she sent or received classified information through her private server, Clinton will be accused of mishandling national-security secrets."[214]

In an analysis of the Clinton email controversy published by the Brookings Institution, Richard Lempert wrote that "security professionals have a reputation for erring in the direction of overclassification."[215] Elizabeth Goitein, co-director of the liberty and national security program at the Brennan Center for Justice at New York University School of Law, says that "The odds are good that any classified information in the Clinton emails should not have been classified," since an estimated 50 percent to 90 percent of classified documents could be made public without risking national security.[215] Nate Jones, an expert with the National Security Archive at George Washington University, said: "Clinton's mistreatment of federal records and the intelligence community's desire to retroactively overclassify are two distinct troubling problems. No politician is giving the right message: Blame Clinton for poor records practices, but don't embrace overclassification while you do it."[215]

A number of journalists (Philip Ewing[213] and Jane Mayer[216] Karoun Demirjian and Devlin Barrett)[212] have commented on the connection between the alleged Russian intelligence document given to the FBI that suggested Attorney General Loretta Lynch would prevent the FBI investigation from digging too deeply into Clinton's affairs (see above), and Comey's July announcement of the FBI investigation findings by himself without Lynch's permission,[213][216] which was later called "extraordinary and insubordinate" by the Department of Justice Inspector General's report.[210] "Current and former officials" told Washington Post reporters Demirjian and Barrett that “Comey relied on the document in making his July decision to announce on his own,” because he feared its contents would be leaked, tainting the public's perception of the FBI investigation.[212] This was despite the fact that Comey himself told investigators “he knew from the first moment” that the document “wasn't true”[213] and the FBI was later unable to corroborate the document.[213]

Ewing and Mayer note the document's effect on the election. According to Ewing, "to the degree" that the document "was intended to help disrupt the election, it worked".[213] Jane Mayer describes the work of political scientist Kathleen Hall Jamieson who argues that Comey's "damaging public pronouncements" on Clinton's handling of classified e-mails" in July and later ten days before the election can "plausibly be attributed to Russian disinformation".[216] While it is difficult to determine how many voters Clinton lost from the pronouncements, Mayer also quotes the Democratic ranking member of the House Intelligence Committee, Adam Schiff, who states that if "the fake intelligence" motivated Comey, then the document was "probably was the most measurable" and "the most significant way in which the Russians may have impacted the outcome of the election."[216]

Clinton addressing email controversy with the media at the UN Headquarters on March 10, 2015

Clinton's spokesman Nick Merrill defended Clinton's usage of her personal server and email accounts as being in compliance with the "letter and spirit of the rules."

Clinton herself stated she had done so as a matter of "convenience."[219]

On March 10, 2015, while attending a conference at the headquarters of the United Nations in Manhattan, Clinton spoke with reporters for about 20 minutes.[220] Clinton said she had used a private email for convenience, "because I thought it would be easier to carry just one device for my work and for my personal emails instead of two."[221][222] It was later determined that Clinton had used both an iPad and a BlackBerry while Secretary of State.[221][223][224][225]

Clinton turned over copies of 30,000 State Department business-related emails from her private server that belonged in the public domain; she later explained that she instructed her lawyer to err on the side of disclosure, turning over any emails that might be work-related. Her aides subsequently deleted about 31,000 emails from the server dated during the same time period that Clinton regarded as personal and private.[226][227][228] State Department employees do have the right to delete personal emails.[229]

Clinton has used humor to try to shrug off the scandals.[18][230] In August 2015, when asked by a reporter whether she had "wiped" her server, Clinton laughed and said: "What? Like with a cloth or something? I don't know how it works digitally at all."[231] In September 2015, Clinton was asked in an interview with Jimmy Fallon on The Tonight Show about the content of the emails. She laughed it off, saying there was nothing interesting and joking that she was offended people found her emails 'boring.'[232]

Clinton's responses to the question, made during her presidential campaign, evolved over time.[214][233] Clinton initially said that there was no classified material on her server. Later, after a government review discovered some of her emails contained classified information, she said she never sent or received information that was marked classified.[214] Her campaign claimed other emails contained information that is now classified, but was retroactively classified by U.S. intelligence agencies after Clinton had received the material.[234] See also the section above on the May 2016 IG report for a number of Clinton statements that were contradicted by the report, and how she and her supporters responded afterward.

Campaign spokesman Brian Fallon said: "She was at worst a passive recipient of unwitting information that subsequently became deemed as classified."[234] Clinton campaign spokeswoman Jennifer Palmieri has "stressed that Clinton was permitted to use her own email account as a government employee and that the same process concerning classification reviews would still be taking place had she used the standard 'state.gov' email account used by most department employees."[127][235] Palmieri later stated: "Look, this kind of nonsense comes with the territory of running for president. We know it, Hillary knows it, and we expect it to continue from now until Election Day."[29]

In her first national interview about the 2016 presidential race, on July 7, 2015, Clinton was asked by CNN's Brianna Keilar about her use of private email accounts while serving as Secretary of State. She said:

Everything I did was permitted. There was no law. There was no regulation. There was nothing that did not give me the full authority to decide how I was going to communicate. Previous secretaries of state have said they did the same thing ... Everything I did was permitted by law and regulation. I had one device. When I mailed anybody in the government, it would go into the government system.[236]

On September 9, 2015, Clinton apologized during an ABC News interview for using the private server, saying she was "sorry for that."[237] Appearing on NBC's Meet the Press on September 27, 2015, Clinton defended her use of the private email server while she was secretary of state, comparing the investigations to Republican-led probes of her husband's presidential administration more than two decades ago, saying, "It is like a drip, drip, drip. And that's why I said, there's only so much that I can control."[238]

Clinton and the State Department said the emails were not marked classified when sent. However, Clinton signed a non-disclosure agreement which stated that classified material may be "marked or unmarked."[239][240][241] Additionally, the author of an email is legally required to properly mark it as classified if it contains classified material, and to avoid sending classified material on a personal device, such as the ones used exclusively by Clinton.[242]

Clinton maintained that she did not send or receive any confidential emails from her personal server. In a Democratic debate with Bernie Sanders on February 4, 2016, Clinton said, "I never sent or received any classified material." In a Meet the Press interview on July 2, 2016, Clinton stated: "Let me repeat what I have repeated for many months now, I never received nor sent any material that was marked classified."[167][168][169]

In an interview with Fox News in late July 2016, Clinton stated "Director Comey said my answers were truthful, and what I've said is consistent with what I have told the American people, that there were decisions discussed and made to classify retroactively certain of the emails." The Washington Post awarded Clinton four "Pinocchios", its worst rating, for her statement saying "While Comey did say there was no evidence she lied to the FBI, that is not the same as saying she told the truth to the American public."[243][244][245]

In her 2017 book What Happened?, Clinton argued that the email controversy and FBI Director James Comey's actions contributed to her loss. A 2019 study in the journal Perspectives on Politics found little evidence to support the hypothesis.[246]

In Venice at the "Hillary: The Hillary Clinton Emails", a work on display in a balcony jutting out over a supermarket at the Despar Teatro Italia during the 58th Biennale of Visual Arts, Clinton made a surprise visit on Tuesday September 10, 2019, to this work of political theater and performance art. The exhibition created by the American poet and artist Kenneth Goldsmith was displayed from May 9, 2019, until November 24, 2019, curated by Francesco Urbano Ragazzi. During her appearance, she said that the attention given to her emails was one of the "strangest" and most "absurd" events in U.S. political history, adding, "Anyone can go in and look at them. There is nothing there. There is nothing that should have been so controversial."[247]

In August 2015, the New York Times reported on "interviews with more than 75 Democratic governors, lawmakers, candidates and party members" on the email issue.[248] The Times reported, "None of the Democrats interviewed went so far as to suggest that the email issue raised concerns about Mrs. Clinton's ability to serve as president, and many expressed a belief that it had been manufactured by Republicans in Congress and other adversaries."[248] At the same time, many Democratic leaders showed increasing frustration among party leaders of Clinton's handling of the email issue. For example, Edward G. Rendell, former governor of Pennsylvania, a Clinton supporter, said that a failure of the Clinton campaign to get ahead of the issue early on meant that the campaign was "left just playing defense."[248] Other prominent Democrats, such as Governor Dannel P. Malloy of Connecticut, were less concerned, noting the campaign was at an early stage and that attacks on Clinton were to be expected.[248]

At the October 2015 primary debate, Clinton's chief rival for the Democratic presidential nomination, Senator Bernie Sanders of Vermont, defended Clinton, saying: "Let me say this. Let me say something that may not be great politics. But I think the secretary is right. And that is that the American people are sick and tired of hearing about your damn emails!"[249][250] Sanders later clarified that he thought Clinton's emails were a "very serious issue,"[251] but Americans want a discussion on issues that are "real" to them, such as paid family and medical leave, college affordability, and campaign finance reform.[250]

"But her emails!" became a meme during and following the 2016 election, often used in a joking or mocking way to the perceived damage done by the Trump administration.[252] Clinton herself echoed the phrase in June 2018, when the Justice Department's Inspector General issued a report on how the investigation of her use of email was conducted. It revealed that FBI Director Comey had used a personal email account to conduct FBI business; Clinton's response was a Twitter comment, "But my emails!"[253]

Republican National Committee chairman Reince Priebus said, in a statement regarding the June 30, 2015 email releases, "These emails ... are just the tip of the iceberg, and we will never get full disclosure until Hillary Clinton releases her secret server for an independent investigation."[254] Trey Gowdy said on June 29, 2015, that he would press the State Department for a fuller accounting of Clinton's emails, after the Benghazi panel retrieved 15 additional emails to Sidney Blumenthal that the department had not provided to the committee.[255]

On September 12, 2015, Republican Senators Charles Grassley and Ron Johnson, chairmen of the Senate Judiciary and Homeland Security committees, respectively, said they would seek an independent review of the deleted emails, if they were recovered from Clinton's server, to determine if there were any government related items among those deleted.[154]

Analyses by Columbia Journalism Review, the Berkman Klein Center for Internet and Society at Harvard University, and the Shorenstein Center at the Harvard Kennedy School show that the Clinton email controversy received more coverage in mainstream media outlets than any other topic during the 2016 presidential election.[12][13][14] The New York Times coverage of the email controversy was notoriously extensive; according to a Columbia Journalism Review analysis, "in just six days, The New York Times ran as many cover stories about Hillary Clinton's emails as they did about all policy issues combined in the 69 days leading up to the election (and that does not include the three additional articles on October 18, and November 6 and 7, or the two articles on the emails taken from John Podesta)."[12] In attempting to explain the lopsided coverage, the Columbia Journalism Review speculates, "In retrospect, it seems clear that the press in general made the mistake of assuming a Clinton victory was inevitable, and were setting themselves as credible critics of the next administration."[12]

Media commentators drew comparisons of Clinton's email usage to past political controversies. Pacific Standard Magazine published an article in May 2015, comparing email controversy and her response to it with the Whitewater investigation 20 years earlier.[256]

In August 2015, Washington Post associate editor and investigative journalist Bob Woodward, when asked about Clinton's handling of her emails, said they remind him of the Nixon tapes from the Watergate scandal.[257] On March 9, 2015, liberal columnist and Clinton supporter Dana Milbank wrote that the email affair was "a needless, self-inflicted wound" brought about by "debilitating caution" in "trying to make sure an embarrassing e-mail or two didn't become public," which led to "obsessive secrecy." Milbank pointed out that Clinton herself had justifiably criticized the George W. Bush administration in 2007 for its "secret" White House email accounts.[258][259]

On Fox News Sunday, political analyst Juan Williams contrasted the media coverage of Clinton's emails to the coverage of the 2007 Bush White House email controversy which he claimed received "just about zero press coverage."[260] PolitiFact found Williams' assertion to be "mostly false," concluding "We found hundreds of articles and television transcripts referencing the issue. Still, Williams has something of a point that compared to the extensive recent coverage of Clinton's use of private email, media coverage of the 2007 Bush White House email controversy was thin."[260]

The Milwaukee Journal Sentinel published an editorial opining that "the only believable reason for the private server in her basement was to keep her emails out of the public eye by willfully avoiding freedom of information laws. No president, no secretary of state, no public official at any level is above the law. She chose to ignore it, and must face the consequences."[261][262] Pascal-Emmanuel Gobry wrote in The Week that "Clinton set up a personal email server, in defiance or at least circumvention of rules, with the probable motive of evading federal records and transparency requirements, and did it with subpar security."[263]

On November 2, 2016, Fox News anchor Bret Baier reported that according to Fox's anonymous sources the FBI had discovered that Clinton's private server had been hacked by "five foreign intelligence agencies."[264][265][266] Baier further reported that according to an anonymous source an FBI investigation of the Clinton Foundation was "likely" to lead to an indictment of Hillary Clinton.[264][265] On November 4, 2016, he acknowledged that his assertions were a mistake, saying, "indictment obviously is a very loaded word," and that he was sorry.[267][264][265]

Huma Abedin passing a note to Hillary Clinton

Judicial Watch, a conservative activist group, filed a complaint against the Department of State in the U.S. District Court for the District of Columbia on September 10, 2013, seeking records under the federal Freedom of Information Act relating to Clinton aide Huma Abedin (a former deputy chief of staff and former senior advisor at the State Department).[286][287] Judicial Watch was particularly interested in Abedin's role as a "special government employee" (SGE), a consulting position which allowed her to represent outside clients while also serving at the State Department. After corresponding with the State Department, Judicial Watch agreed to dismiss its lawsuit on March 14, 2014.[286] On March 12, 2015, in response to the uncovering of Clinton's private email account, it filed a motion to reopen the suit, alleging that the State Department had misrepresented its search and had not properly preserved and maintained records under the act.[286] U.S. District Judge Emmet G. Sullivan granted the motion to reopen the case on June 19, 2015.[288][289]

On July 21, 2015, Judge Sullivan issued supplemental discovery orders, including one that Clinton, Abedin, and former Deputy Secretary of State Cheryl Mills disclose any required information they had not disclosed already, and promise under oath that they had done so, including a description of the extent Abedin and Mills had used Clinton's email server for official government business.[290][291]

On August 10, 2015, Clinton filed her declaration, stating "I have directed that all my emails on clintonemail.com in my custody that were or potentially were federal records be provided to the Department of State," and that as a result of this directive, 55,000 pages of emails were produced to the Department on December 5, 2014.[292][293][294] She said in her statement that Abedin did have an email account through clintonemail.com that "was used at times for government business," but that Mills did not.[292][293][294] The statement was filed as Clinton faced questions over fifteen emails in exchanges with Blumenthal that were not among the emails she gave to the department the previous year. She did not address the matter of those emails in the statement.[293] On September 25, 2015, several additional emails from her private server[295] surfaced which she had not provided to the State Department.[295][296][297] These emails between Clinton and General David Petraeus, discussing personnel matters, were part of an email chain that started on a different email account before her tenure as Secretary of State,[295][296][297] but continued onto her private server in late January 2009 after she had taken office.[295][296][297] The existence of these emails also called into question Clinton's previous statement that she did not use the server before March 18, 2009.[298]

In February 2016, Judge Sullivan issued a discovery order in the case, ruling that depositions of State Department officials and top Clinton aides were to proceed.[299] On May 26, 2016, Judicial Watch released the transcript of the deposition of Lewis Lukens,[300] on May 31, 2016, the transcript of Cheryl Mills,[301] on June 7, 2016, the transcript of Ambassador Stephen Mull,[302] and on June 9, 2016, Karin Lang, Director of Executive Secretariat Staff.[303]

In March 2020, federal district court judge Royce Lamberth ruled that Clinton must provide a deposition.[304] A three-judge panel of the DC Circuit Court of Appeals unanimously overturned Lamberth's ruling the following August. The full DC Circuit Court unanimously declined to hear an appeal in October, allowing the panel decision to stand.[305]

The testimony of Clarence Finney, who worked in the department responsible for FOIA searches, said that he first became curious about Clinton's email setup after seeing the Texts from Hillary meme on the Internet.[306]

In November 2014, Jason Leopold of Vice News made a Freedom of Information Act request for Clinton's State Department records,[307][308] and, on January 25, 2015, filed a lawsuit in the U.S. District Court for the District of Columbia seeking to compel production of responsive documents.[307][308][309] After some dispute between Leopold and the State Department over the request, U.S. District Judge Rudolph Contreras ordered rolling production and release of the emails on a schedule set by the State Department.[307][310][311]

Over the next several months, the State Department completed production of 30,068 emails, which were released in 14 batches, with the final batch released on February 29, 2016.[312] Both the Wall Street Journal and WikiLeaks independently set up search engines for anyone who would like to search through the Clinton emails released by the State Department.[313][314]

It was revealed in October 2017 that during the 2016 US presidential election, Cambridge Analytica funder and GOP mega-donor Rebekah Mercer had proposed creating a searchable data base for Hillary Clinton emails in the public domain and then forwarded this suggestion to several people, including Cambridge Analytica CEO Alexander Nix, who personally emailed a request to Julian Assange for Clinton's emails.[315] Assange responded to the report by saying he denied Nix's request.[316]

The emails showed that Blumenthal communicated with Clinton while Secretary on a variety of issues including Benghazi.[254][317][318][319]

On March 11, 2015, the day after Clinton acknowledged her private email account, the Associated Press (AP) filed suit against the State Department regarding multiple FOIA requests over the past five years. The requests were for various emails and other documents from Clinton's time as secretary of state and were still unfulfilled at the time.[320][321][322] The State Department said that a high volume of FOIA requests and a large backlog had caused the delay.[320][323]

On July 20, 2015, U.S. District Judge Richard J. Leon reacted angrily to what he said was "the State Department for four years dragging their feet."[323] Leon said that "even the least ambitious bureaucrat" could process the request faster than the State Department was doing.[324]

On August 7, 2015, Leon issued an order setting a stringent schedule for the State Department to provide the AP with the requested documents over the next eight months.[322] The order issued by Leon did not include the 55,000 pages of Clinton emails the State Department scheduled to be released in the Leopold case, or take into account 20 boxes given to the State Department by Philippe Reines, a former Clinton senior adviser.[322]

In September 2015, the State Department filed a motion in court seeking to consolidate and coordinate the large number of Freedom of Information Act lawsuits relating to Clinton and Clinton-related emails. There were at the time at least three dozen lawsuits pending, before 17 different judges.[325][326]

In a U.S. District Court for the District of Columbia order issued on October 8, 2015, Chief U.S. District Judge Richard W. Roberts wrote that the cases did not meet the usual criteria for consolidation but: "The judges who have been randomly assigned to these cases have been and continue to be committed to informal coordination so as to avoid unnecessary inefficiencies and confusion, and the parties are also urged to meet and confer to assist in coordination."[326]

In 2015, Judicial Watch and the Cause of Action Institute filed two lawsuits seeking a court order to compel the Department of State and the National Archives and Records Administration to recover emails from Clinton's server. In January 2016, these two suits (which were consolidated because they involved the same issues) were dismissed as moot by U.S. District Judge James Boasberg, because the government was already working to recover and preserve these emails.[327]

In March 2016, the Republican National Committee filed four new complaints in the U.S. District Court for the District of Columbia stemming from Freedom of Information Act requests it had filed the previous year. These new filings brought the total number of civil suits over access to Clinton's records pending in federal court to at least 38.[328]

In June 2016, in response to the Republican National Committee's complaints filed in March 2016, the State Department estimates it will take 75 years to complete the review of documents which are responsive to the complaints.[329] It has been observed that a delay of this nature would cause the documents to remain out of public view longer than the vast majority of classified documents which must be declassified after 25 years.[330]

In December 2018, judge Royce Lamberth of the U.S. District Court for the District of Columbia called Clinton's use of a private server for government business "one of the gravest modern offenses to government transparency".[331]