Hillary Clinton email controversy

This article is part of a series about Hillary Clinton
Political positions Electoral history Clinton Foundation State Department controversy U.S. Secretary of State Tenure Obama's foreign policy QDDR Email controversy Hillary Doctrine Campaign for the presidency 2008 Primaries Endorsements Campaign for the presidency 2016 Primaries Convention Endorsements political non-political Potential SCOTUS candidates U.S. Senator from New York Tenure 2000 election 2006 re-election First Lady of the United States Role Health care plan SCHIP Whitewater and other investigations Response to Lewinsky scandal Awards and honors Books

In March 2015, it became publicly known that Hillary Clinton, during her tenure as United States Secretary of State, had used her family's private email server for official communications, rather than official State Department email accounts maintained on federal servers. Those official communications included thousands of emails that would retroactively be marked classified by the State Department.

The controversy unfolded against the backdrop of Clinton's 2016 presidential election campaign and hearings held by the United States House Select Committee on Benghazi. Some experts, officials, and members of Congress have contended that her use of private messaging system software and a private server violated State Department protocols and procedures, as well as federal laws and regulations governing recordkeeping. In response, Clinton has said that her use of personal email was in compliance with federal laws and State Department regulations, and that former secretaries of state had also maintained personal email accounts, though not their own private email servers.

After allegations were raised that some of the emails in question contained classified information, the Federal Bureau of Investigation (FBI) initiated an investigation regarding the origin and handling of classified emails on Clinton's server. The FBI Report found that some of the emails originated in five other intelligence agencies. The FBI found that all classified emails on Clinton's server were stored and sent from "unclassified systems", violating the same policies as those on Clinton's personal server.

FBI Director James Comey identified 110 emails as containing information that was classified at the time it was sent, including 65 emails deemed "Secret" and 22 deemed "Top Secret". None of these had classification markings. However, as noted in Clinton's non-disclosure agreement, unmarked classified information should be treated the same as marked classified information. An additional three email chains contained "portion markings", simply a "(C)" indicating "Confidential" in front of one or more paragraphs. These were not included in Comey's list of 110 because the State Department failed to confirm they were classified at the time they were sent. Clinton told the FBI she did not know the meaning of "(C)". Nearly 2,100 emails on the server were retroactively marked as classified by the State Department.

In May 2016, the State Department's Office of the Inspector General released an 83-page report about the State Department's email practices, including Clinton's. On July 5, 2016, Comey announced that the FBI's investigation had concluded that Clinton was "extremely careless" in handling her email system but recommended that no charges be filed against her. On July 6, 2016, Attorney General Loretta Lynch announced that no charges would be filed.

On July 7, the State Department reopened its probe into the email controversy. On October 28, 2016, Comey notified Congress that the FBI has started looking into newly discovered emails that may be pertinent to the case. Law enforcement officials stated the emails were found on a laptop belonging to Clinton aide Huma Abedin's husband, Anthony Weiner, during an investigation of his sexting scandals.

On November 6, Comey notified Congress that the FBI had not changed its conclusion, reached in July, regarding Clinton's emails.^[1]

Background

Clinton's use of BlackBerrys

Prior to her appointment as Secretary of State in 2009, Clinton and her circle of friends and colleagues communicated via BlackBerry phones.^[2] State Department security personnel suggested this would pose a security risk during her tenure.^[3] The email account used on Clinton's BlackBerry was then hosted on a private server in the basement of her home in Chappaqua, New York, but that information was not disclosed to State Department security personnel or senior State Department personnel.^[4] It proved impractical to find a solution, even after consulting the National Security Agency, which would not have allowed Clinton to use her BlackBerry, or a similarly unsecured device, linked to a private server in her home.^[5]

Setting up a secure desktop computer in her office was suggested, but Clinton was unfamiliar with their use^[6] and opted for the convenience of her BlackBerry,^[7] not the State Department, government protocol of a secured desktop computer. Efforts to find a secure solution were abandoned by Clinton,^[5] and she was warned by State Department security personnel about the vulnerability of an unsecured BlackBerry to hacking.^[8] She affirmed her knowledge of the danger, and was reportedly told that the Bureau of Diplomatic Security had obtained intelligence about her vulnerability while she was on a trip to Asia, but continued to use her BlackBerry outside her office.^[9]

Domain names and email server

At the time of Senate confirmation hearings on Hillary Clinton's nomination as Secretary of State, the domain names clintonemail.com, wjcoffice.com, and presidentclinton.com were registered to Eric Hoteham,^[10] with the home of Clinton and her husband in Chappaqua, New York, as the contact address.^[11][12] The domains were pointed to a private email server that Clinton (who never had a state.gov email account) used to send and receive email, and which was purchased and installed in the Clintons' home for her 2008 presidential campaign.^[13]

The email server was located in the Clintons' home in Chappaqua, New York, until 2013, when it was sent to a data center in New Jersey before being handed over to Platte River Networks, a Denver-based information technology firm that Clinton hired to manage her email system.^{[14][15][16][17][18]}

The server itself runs a Microsoft Exchange 2010^[19][20] server with access to emails over the internet being delivered by Outlook Web App. The webpage is secured with a TLS certificate to allow information to be transmitted securely when using the website. However, prior to March 29, 2009, the webpage was reportedly not secured with a TLS certificate, meaning that information transmitted using the service was unencrypted and may have been liable to interception.^[9]

Initial awareness

As early as 2009, officials with the National Archives and Records Administration (NARA) expressed concerns over possible violations of normal federal government record-keeping procedures at the Department of State under Secretary Clinton.^[21]

In December 2012, near the end of Clinton's tenure as Secretary of State, a nonprofit group called Citizens for Responsibility and Ethics in Washington, or CREW, filed a FOIA request seeking records about her email. CREW received a response in May 2013: "no records responsive to your request were located."^[22] Emails sent to Clinton's private clintonemail.com address were first discovered in March 2013, when a hacker named "Guccifer" widely distributed emails sent to Clinton from Sidney Blumenthal, which Guccifer obtained by illegally accessing Blumenthal's email account.^[23][24][25] The emails dealt with the 2012 Benghazi attack and other issues in Libya and revealed the existence of her clintonemail.com address.^[23][24][25]

Blumenthal did not have a security clearance when he received material from Clinton that has since been characterized as classified by the State Department.^[26][27]

In the summer of 2014, lawyers from the State Department noticed a number of emails from Clinton's personal account, while reviewing documents requested by the House Select Committee on Benghazi. A request by the State Department for additional emails led to negotiations with her lawyers and advisors. In October, the State Department sent letters to Clinton and all previous Secretaries of State back to Madeleine Albright requesting emails and documents related to their work while in office. On December 5, 2014, Clinton lawyers delivered 12 file boxes filled with printed paper containing more than 30,000 emails. Clinton withheld almost 32,000 emails deemed to be of a personal nature.^[22] Datto, Inc., which provided data backup service for Clinton's email, agreed to give the FBI the hardware that stored the backups.^[28]

As of May 2016, no answer had been provided to the public as to whether 31,000 emails deleted by Hillary Clinton as personal have been or could be recovered.^[29]

A March 2, 2015, New York Times article broke the story that the Benghazi panel had discovered that Clinton exclusively used her own private email server rather than a government-issued one throughout her time as Secretary of State, and that her aides took no action to preserve emails sent or received from her personal accounts as required by law.^[30][31][32] At that point, Clinton announced that she had asked the State Department to release her emails.^[33] Some in the media labeled the controversy "emailgate".^[34][35][36]

Use of private server for government business

According to Clinton's spokesperson Nick Merrill, a number of government officials have used private email accounts for official business, including secretaries of state before Clinton.^[37]

State Department spokesperson Marie Harf said that: "For some historical context, Secretary Kerry is the first secretary of state to rely primarily on a state.gov email account."^[30] John Wonderlich, a transparency advocate with the Sunlight Foundation, observed while many government officials used private email accounts, their use of private email servers was much rarer.^[38]

Dan Metcalfe, a former head of the Justice Department's Office of Information and Privacy, said this gave her even tighter control over her emails by not involving a third party such as Google and helped prevent their disclosure by Congressional subpoena. He added: "She managed successfully to insulate her official emails, categorically, from the FOIA, both during her tenure at State and long after her departure from it—perhaps forever", making it "a blatant circumvention of the FOIA by someone who unquestionably knows better".^[30][39]

According to Department spokesperson Harf, use by government officials of personal email for government business is permissible under the Federal Records Act, so long as relevant official communications, including all work-related emails, are preserved by the agency. The Act (which was amended in late 2014 after Clinton left office to require that personal emails be transferred to government servers within 20 days) requires agencies to retain all official communications, including all work-related emails, and stipulates that government employees cannot destroy or remove relevant records.^[30] NARA regulations dictate how records should be created and maintained, require that they must be maintained "by the agency" and "readily found", and that the records must "make possible a proper scrutiny by the Congress".^[30] Section 1924 of Title 18 of the United States Code addresses the deletion and retention of classified documents, under which "knowingly" removing or housing classified information at an "unauthorized location" is subject to a fine, or up to a year in prison.^[30]

Experts such as Metcalfe agree that these practices are allowed by federal law assuming that the material is not supposed to be classified,^[37][40] or at least these practices are allowed in case of emergencies,^[31] but they discourage these practices, believing that official email accounts should be used.^[30]

Jason R. Baron, the former head of litigation at NARA, described the practice as "highly unusual" but not a violation of the law. In a separate interview, he said, "It is very difficult to conceive of a scenario—short of nuclear winter—where an agency would be justified in allowing its cabinet-level head officer to solely use a private email communications channel for the conduct of government business."^[31][41][42] Baron told the Senate Judiciary Committee in May 2015 that "any employee's decision to conduct all email correspondence through a private email network, using a non-.gov address, is inconsistent with long-established policies and practices under the Federal Records Act and NARA regulations governing all federal agencies."^[43]

May 2016 report from State Department's inspector general

In May 2016, the Department's Office of the Inspector General Steve Linick released an 83-page report about the State Department's email practices.^[44][45][46] The Inspector General was unable to find evidence that Clinton had ever sought approval from the State Department staff for her use of a private email server, determining that if Clinton had sought approval, Department staff would have declined her setup because of the "security risks in doing so".^[44] Aside from security risks, the report stated that "she did not comply with the Department's policies that were implemented in accordance with the Federal Records Act."^[47] Each of these findings contradicted what Clinton and her aides had been saying up to that point.^[48][49][50] The report also stated that Clinton and her senior aides declined to speak with the investigators, while the previous four Secretaries of State did so.^[44]

The report also reviewed the practices of several previous Secretaries of State and concluded that the Department's recordkeeping practices were subpar for many years.^[44] The Inspector General criticized Clinton's use of private email for Department business, concluding that it was "not an appropriate method" of document preservation and did not follow Department policies that aim to comply with federal record laws. The report also criticized Colin Powell, who used a personal email account for business, saying that this violated some of the same Department policies.^[44] State Department spokesman Mark Toner said the report emphasized the need for federal agencies to adapt "decades-old record-keeping practices to the email-dominated modern era" and said that the Department's record-retention practices had been improved under the current Secretary of State John F. Kerry, Clinton's successor.^[44] The report also notes that the rules for preserving work-related emails were updated in 2009.^[51]

Inspector General Linick wrote that he "found no evidence that staff in the Office of the Legal Adviser reviewed or approved Secretary Clinton's personal system", and also found that multiple State employees who raised concerns regarding Clinton's server were told that the Office of the Legal Adviser had approved it, and were further told to "never speak of the Secretary's personal email system again".^{[52][53][54][55]}

Clinton campaign spokesman Brian Fallon issued a statement saying: "The report shows that problems with the State Department's electronic record-keeping systems were long-standing" and that Clinton "took steps that went much further than others to appropriately preserve and release her records."^[44] However, the Associated Press said, "The audit did note that former Secretary of State Colin Powell had also exclusively used a private email account.... But the failings of Clinton were singled out in the audit as being more serious than her predecessor."^[56] The report stated that "By Secretary Clinton's tenure, the department's guidance was considerably more detailed and more sophisticated, Secretary Clinton's cybersecurity practices accordingly must be evaluated in light of these more comprehensive directives."^[56]

Server security and hacking attempts

Encryption and security

In 2008, before Hillary Clinton became Secretary of State, Justin Cooper, a longtime aide to Clinton's husband, former President Bill Clinton, managed the system. Cooper had no security clearance or expertise in computer security.^[57] Later, Bryan Pagliano, the former IT director for Clinton's 2008 presidential campaign, was hired to maintain their private email server while Clinton was Secretary of State.^[58][59] Pagliano had invoked the Fifth Amendment during congressional questioning about Clinton's server. In early 2016, he was granted immunity by the Department of Justice in exchange for cooperation with prosecutors.^[60] A Clinton spokesman said her campaign was "pleased" Pagliano was now cooperating with prosecutors.^[61] As of May 2016, the State Department remained unable to locate most of Pagliano's work-related emails from the period when he was employed by that department under Secretary Clinton.^[62]

Security experts such as Chris Soghoian believe that emails to and from Clinton may have been at risk of hacking and foreign surveillance.^[63] Marc Maiffret, a cybersecurity expert, said that the server had "amateur hour" vulnerabilities.^[64] For the first two months after Clinton was appointed Secretary of State and began accessing mail on the server through her Blackberry, transmissions to and from the server were apparently not encrypted. On March 29, 2009, a digital certificate was obtained which would have permitted encryption.^[9]

Former Director of the Defense Intelligence Agency Michael T. Flynn,^[65] former United States Secretary of Defense Robert Gates,^[66][67] and former deputy director of the Central Intelligence Agency Michael Morell^[68][69] have said that it is likely that foreign governments were able to access the information on Clinton's server. Michael Hayden, former Director of the National Security Agency, Principal Deputy Director of National Intelligence, and Director of the Central Intelligence Agency said "I would lose all respect for a whole bunch of foreign intelligence agencies if they weren't sitting back, paging through the emails."^[70]

Hacking attempts

Clinton's server was configured to allow users to connect openly from the Internet and control it remotely using Microsoft's Remote Desktop Services.^[64]

It is known that hackers in Russia were aware of Clinton's non-public email address as early as 2011.^[71] Secretary Clinton and her staff were aware of hacking attempts in 2011, and were reportedly worried about them.^[72]

In 2012, according to server records, a hacker in Serbia scanned Clinton's Chappaqua server at least twice, in August and in December 2012. It was unclear whether the hacker knew the server belonged to Clinton, although it did identify itself as providing email services for clintonemail.com.^[64] During 2014, Clinton's server was the target of repeated intrusions originating in Germany, China, and South Korea. Threat monitoring software on the server blocked at least five such attempts. The software was installed in October 2013, and for three months prior to that, no such software had been installed.^[73][74]

According to Pagliano, security logs of Clinton's email server showed no evidence of successful hacking.^[75] The New York Times reported that "forensic experts can sometimes spot sophisticated hacking that is not apparent in the logs, but computer security experts view logs as key documents when detecting hackers," adding the logs "bolster Mrs. Clinton's assertion that her use of a personal email account […] did not put American secrets into the hands of hackers or foreign governments.^[63][75][76]

In 2013, Romanian hacker Marcel Lehel Lazăr (aka "Guccifer") distributed private memos from Sidney Blumenthal to Clinton on events in Libya.^[77][78] In 2016, Lazăr was extradited from Romania to the U.S. to face unrelated federal charges related to his hacking into the accounts of a number of high-profile U.S. figures,^[79] pleading guilty to these charges.^[80][81] While detained pending trial, Lazăr claimed to the media that he had successfully hacked Clinton's server, but provided no proof of this claim.^[82] Officials associated with the investigation told the media that they found no evidence supporting Lazăr's assertion,^[83] and Clinton press secretary Brian Fallon said "There is absolutely no basis to believe the claims made by this criminal from his prison cell."^[84][85] FBI Director James Comey later stated in a congressional hearing that Guccifer admitted his claim was a lie.^[86]

Classified information in emails

In various interviews, Clinton has said that "I did not send classified material, and I did not receive any material that was marked or designated classified."^[87] However, in June and July 2016, a number of news outlets reported that Clinton's emails did include messages with classification "portion markings".^[88][89] The FBI investigation found that 110 messages contained information that was classified at the time it was sent. Sixty-five of those emails were found to contain information classified as "Secret"; more than 20 contained "Top-Secret" information.^[90][91] Three emails, out of 30,000, were found to be marked as classified, although they lacked classified headers and were only marked with a small "c" in parentheses, described as "portion markings" by Comey. He added it was possible Clinton was not "technically sophisticated" enough to understand what the three classified markings meant.^[92][93][94]

According to the State Department, there were 2,093 email chains on the server that were retroactively marked as classified by the State Department at the "Confidential" confidential level.^[95][96]

Of the 2,100 emails that contained classified information, Clinton personally wrote 104 and her aides wrote hundreds more.^[44][97]

Inspector general reports and statements

A June 29, 2015, memorandum from the Inspector General of the State Department, Steve A. Linick, said that a review of the 55,000-page email release found "hundreds of potentially classified emails".^[98] A July 17, 2015, follow-up memo, sent jointly by Linick and the Intelligence Community (IC) inspector general, I. Charles McCullough III, to Under Secretary of State for Management Patrick F. Kennedy, stated that they had confirmed that several of the emails contained classified information that was not marked as classified, at least one of which was publicly released.^[98]

On July 24, 2015, Linick and McCullough said they had discovered classified information on Clinton's email account,^[99] but did not say whether Clinton sent or received the emails.^[99] Investigators from their office, searching a randomly chosen sample of 40 emails, found four that contained classified information that originated from U.S. intelligence agencies, including the Central Intelligence Agency (CIA) and the National Security Agency (NSA).^[99] Their statement said that the information they found was classified when sent, remained so as of their inspection, and "never should have been transmitted via an unclassified personal system".^[99]

In a separate statement in the form of a letter to Congress, McCullough said that he had made a request to the State Department for access to the entire set of emails turned over by Clinton, but that the Department rejected his request.^[99][100] The letter stated that none of the emails were marked as classified, but because they included classified information they should have been marked and handled as such, and transmitted securely.^[100]

On August 10, 2015, the IC inspector general said that two of the 40 emails in the sample were "Top Secret/Sensitive Compartmented Information" and subsequently given classified labels of "TK" (for "Talent Keyhole", indicating material obtained by aerial or space-based imagery sources and NOFORN).^[101] One is a discussion of a news article about a U.S. drone strike operation.^[101] The second, he said, either referred to classified material or else was "parallel reporting" of open-source intelligence, which would also be classified.^[101][102] Clinton's presidential campaign and the State Department disputed the letter, and questioned whether the emails had been over-classified by an arbitrary process. According to an unnamed source, a secondary review by the CIA and the National Geospatial-Intelligence Agency endorsed the earlier inspectors general findings concluding that the emails (one of which concerned North Korea's nuclear weapons program) were "Top Secret" when received by Clinton through her private server in 2009 and 2011, a conclusion also disputed by the Clinton campaign.^[103]

The IC inspector general issued another letter to Congress on January 14, 2016. In this letter he stated that an unnamed intelligence agency had made a sworn declaration that "several dozen emails [had been] determined by the IC element to be at the CONFIDENTIAL, SECRET, and TOP SECRET/SAP levels." Other intelligence officials added that the several dozen were not the two emails from the previous sample and that the clearance of the IC inspector general himself had to be upgraded before he could learn about the programs referenced by the emails.^{[104][105][106]}

On January 29, 2016, the State Department announced that 22 documents from Clinton's email server would not be released because they contained highly classified information that was too sensitive for public consumption. At the same time, the State Department announced that it was initiating its own investigation into whether the server contained information that was classified at the time it was sent or received.^[107]

In February 2016, State Department IG Linick addressed another report to Under Secretary of State Kennedy, stating his office had also found classified material in 10 emails in the personal email accounts of members of former Secretary Condoleezza Rice's staff and in two emails in the personal email account of former Secretary of State Colin Powell.^[108][109] None of the emails were classified for intelligence reasons.^[110] PolitiFact found a year earlier that Powell was the only former secretary of state to use a personal email account.^[111] In February 2016, Clinton's campaign chairman issued a statement claiming that her emails, like her predecessors', were "being inappropriately subjected to over-classification."^[108]

FBI investigation

July 2015 – Security referral

The State Department and Intelligence Community (IC) inspector generals' discovery of four emails containing classified information, out of a random sample of 40, prompted them to make a security referral to the FBI's counterintelligence office, to alert authorities that classified information was being kept on Clinton's server and by her lawyer on a thumb drive.^[99][100] As part of an FBI probe at the request of the IC inspector general, Clinton agreed to turn over her email server to the U.S. Department of Justice, as well as thumb drives containing copies of her work-related emails. Other emails were obtained by the United States House Select Committee on Benghazi from other sources, in connection with the committee's inquiry. Clinton's own emails are being made public in stages by the State Department on a gradual schedule.^{[112][113][114]}

Clinton's IT contractors turned over her personal email server to the FBI on August 12, 2015,^[18] as well as thumb drives containing copies of her emails.^[115][116]

In a letter describing the matter to Senator Ron Johnson, Chairman of the Senate Homeland Security Committee, Clinton's lawyer David E. Kendall said that emails, and all other data stored on the server, had earlier been erased prior to the device being turned over to the authorities, and that both he and another lawyer had been given security clearances by the State Department to handle thumb drives containing about 30,000 emails that Clinton subsequently also turned over to authorities. Kendall said the thumb drives had been stored in a safe provided to him in July by the State Department.^[117]

August 2015 – Investigation continues; email recovery

On August 20, 2015, U.S. District Judge Emmet G. Sullivan stated that Hillary Clinton's actions of maintaining a private email server were in direct conflict with U.S. government policy. "We wouldn't be here today if this employee had followed government policy," he said, and ordered the State Department to work with the FBI to determine if any emails on the server during her tenure as Secretary of State could be recovered.^{[118][119][120]}

Platte River Networks, the Denver-based firm that managed the Clinton server since 2013, said it had no knowledge of the server being wiped. "Platte River has no knowledge of the server being wiped", company spokesman Andy Boian told the Washington Post. "All the information we have is that the server wasn't wiped."^[121] When asked by the Washington Post, the Clinton campaign declined to comment.^[121]

In September 2015, FBI investigators were engaged in sorting messages recovered from the server.^[122] In November 2015, the FBI expanded its inquiry to examine whether Clinton or her aides jeopardized national security secrets, and if so, who should be held responsible.^[123][124]

Conflicting media sources sized the FBI investigation from 12^[125] to 30 agents^[126] as of March 2016.

May–July 2016 – Public statements

In May 2016, FBI Director James Comey said that Clinton's description of the probe as a "security inquiry" was inaccurate saying "It's in our name. I'm not familiar with the term 'security inquiry'" and "We're conducting an investigation ... That's what we do".^[127]

In late June 2016, it was reported that Bill Clinton met privately with Attorney General Loretta Lynch on her private plane on the tarmac at Phoenix Sky Harbor International Airport. Officials indicated that the 30 minute meeting took place when Clinton became aware that Lynch's plane was on the same tarmac at the airport. When the meeting became public, Lynch stated that it was "primarily social" and "there was no discussion of any matter pending for the department or any matter pending for any other body". Lynch was criticized for her involvement in the meeting and was called on by some critics to recuse herself from involvement in the FBI's investigation of the email case. In response, she stated "The F.B.I. is investigating whether Mrs. Clinton, her aides or anyone else broke the law by setting up a private email server for her to use as secretary of state", but "the case will be resolved by the same team that has been working on it from the beginning" and "I will be accepting their recommendations."^{[128][129][130]}

On July 1, 2016, the New York Times reported in the name of a "Justice Department official" that Attorney General Loretta Lynch will accept "whatever recommendation career prosecutors and the F.B.I. director make about whether to bring charges related to Hillary Clinton's personal email server."^[131]

Clinton maintained she did not send or receive any confidential emails from her personal server. In a Democratic debate with Bernie Sanders on February 4, 2016, Clinton said, "I never sent or received any classified material." In a Meet the Press interview on July 2, 2016, she stated: "Let me repeat what I have repeated for many months now, I never received nor sent any material that was marked classified."^{[132][133][134]}

July 2016 – Investigation concludes

On July 5, 2016, FBI Director Comey announced in a statement he read to press and television reporters at FBI headquarters in Washington, DC, that the FBI had completed its investigation and was referring it to the State Department with the recommendation "that no charges are appropriate in this case."^{[135][136][137]} He added, "Although there is evidence of potential violations of the statutes regarding the handling of classified information, our judgment is that no reasonable prosecutor would bring such a case."^[135][136]

With regard to mishandling of classified information, Comey said, "there is evidence that they [Clinton and her team] were extremely careless in their handling of very sensitive, highly classified information." The investigation found 110 emails that should have been regarded as classified at the time they were sent; another 2,000 emails were later reconsidered as classified.^[138]

Comey said that "any reasonable person in Secretary Clinton's position, or in the position of those government employees with whom she was corresponding … should have known that an unclassified system was no place for that conversation."^[139][140]

The FBI learned that Clinton used her personal email extensively while outside the United States, both sending and receiving work-related emails in the territory of sophisticated adversaries. The FBI did not find "direct evidence that Secretary Clinton's personal e-mail domain … was successfully hacked"; they assessed it "possible that hostile actors gained access" to it.^[135][137] Investigators found that State Department employees often used private emails to conduct business. Comey noted, "We also developed evidence that the security culture of the State Department in general, and with respect to use of unclassified e-mail systems in particular, was generally lacking in the kind of care for classified information found elsewhere in the government."^[141]

On July 6, 2016, U.S. Attorney General Loretta Lynch confirmed that the investigation into Hillary Clinton's use of private email servers while secretary of state would be closed without criminal charges.^[142]

October 2016 – Additional investigation

In early October 2016, FBI criminal investigators working on a case involving former Congressman Anthony Weiner allegedly sending sexually explicit texts to a fifteen-year-old girl discovered emails from Weiner's estranged wife, Huma Abedin, vice chair of Hillary Clinton's 2016 presidential campaign, that they considered potentially relevant to the Clinton server investigation. FBI officials reportedly decided to disclose the development despite its potential effect on the pending presidential election to preempt the possibility that it would be leaked in another way.^[143]

On October 28, 2016, Comey informed Congress that "in connection with an unrelated case, the FBI has learned of the existence of emails that appear pertinent to the investigation." He said the FBI will take "appropriate investigative steps designed to allow investigators to review these emails to determine whether they contain classified information, as well as to assess their importance to our investigation." He added that the FBI "cannot yet assess whether or not this material may be significant."^[144] The FBI obtained a new search warrant to allow them to review Abedin's emails.^[143]

Comey informed Congress of this additional investigation despite having been advised by Justice Department officials that such an announcement would violate department policies and procedures, including a policy not to comment on investigations close to an election.^[145] Comey later explained, in a letter to FBI employees, "We don't ordinarily tell Congress about ongoing investigations, but here I feel an obligation to do so given that I testified repeatedly in recent months that our investigation was completed." Law enforcement sources added that he feared he would be accused of concealing relevant information if he did not disclose it.^[145]

News of this renewed investigation being revealed shortly before the U.S. presidential election led to the announcement being described as an "October surprise",^[146] and prompted statements from both the Democratic and Republican campaigns. Donald Trump repeated his characterization that Hillary Clinton's email usage as secretary of state was "worse than Watergate."^[147][148] Clinton called for the FBI to immediately release all information about the newly discovered emails and said she was confident the FBI would not change its earlier conclusion that there is no basis for criminal prosecution.^[149] Senator Dianne Feinstein (D-CA) said she was "shocked" by the letter, saying it "played right into the political campaign of Donald Trump."^[145]

On November 6, in another letter to Congress, Comey stated that, after working "around the clock" to review all of the newly discovered emails, the FBI had not changed the conclusion it reached in July.^{[150][151][152]} An unnamed government official added that the newly discovered emails turned out to be either personal or duplicates of emails previously reviewed, and that Comey's letter represents a conclusion of the investigation.^[153] The following day, stock and currency markets around the world surged in response.^{[154][155][156]}

Internal State Department investigation

On July 7, 2016, the internal State Department resumed its review of whether classified information had been mishandled. The review had been suspended until the completion of the Justice Department investigation.^[157][158]

Opinions of journalists and experts

According to the New York Times, if Clinton was a recipient of classified emails, "it is not clear that she would have known that they contained government secrets, since they were not marked classified."^[87][99] The newspaper reported that "most specialists believe the occasional appearance of classified information in the Clinton account was probably of marginal consequence."^[13] Steven Aftergood, director of the Project on Government Secrecy at the Federation of American Scientists, said that inadvertent "spillage" of classified information into an unclassified realm is a common occurrence.^[13]

Reuters' August 2015 review of a set of released emails found "at least 30 email threads from 2009, representing scores of individual emails," that include what the State Department identifies as "foreign government information", defined by the U.S. government as "any information, written or spoken, provided in confidence to U.S. officials by their foreign counterparts." Although unmarked, Reuters' examination appeared to suggest that these emails "were classified from the start."^[87] J. William Leonard, a former director of the NARA Information Security Oversight Office, said that such information is "born classified" and that "[I]f a foreign minister just told the secretary of state something in confidence, by U.S. rules that is classified at the moment it's in U.S. channels and U.S. possession."^[87] According to Reuters, the standard U.S. government nondisclosure agreement "warns people authorized to handle classified information that it may not be marked that way and that it may come in oral form." The State Department "disputed Reuters' analysis" but declined to elaborate.^[87]

The Associated Press reported, "Some officials said they believed the designations were a stretch—a knee-jerk move in a bureaucracy rife with over-classification."^[101] Jeffrey Toobin, in an August 2015 New Yorker article, wrote that the Clinton email affair is an illustration of overclassification, a problem written about by Senator Daniel Patrick Moynihan in his book Secrecy: The American Experience.^[159] Toobin writes that "government bureaucracies use classification rules to protect turf, to avoid embarrassment, to embarrass rivals—in short, for a variety of motives that have little to do with national security."^[159] Toobin wrote that "It's not only the public who cannot know the extent or content of government secrecy. Realistically, government officials can't know either—and this is Hillary Clinton's problem. Toobin noted that "one of Clinton's potentially classified email exchanges is nothing more than a discussion of a newspaper story about drones" and wrote: "That such a discussion could be classified underlines the absurdity of the current system. But that is the system that exists, and if and when the agencies determine that she sent or received classified information through her private server, Clinton will be accused of mishandling national-security secrets."^[159]

In an analysis of the Clinton email controversy published by the Brookings Institution, Richard Lempert wrote that "security professionals have a reputation for erring in the direction of overclassification."^[160] Elizabeth Goitein, co-director of the liberty and national security program at the Brennan Center for Justice at New York University School of Law, says that "The odds are good that any classified information in the Clinton emails should not have been classified," since an estimated 50 percent to 90 percent of classified documents could be made public without risking national security.^[160] Nate Jones, an expert with the National Security Archive at George Washington University, said: "Clinton's mistreatment of federal records and the intelligence community's desire to retroactively overclassify are two distinct troubling problems. No politician is giving the right message: Blame Clinton for poor records practices, but don't embrace overclassification while you do it."^[160]

House Oversight Committee hearing

On July 7, 2016, Comey was questioned for 5 hours by the United States House Committee on Oversight and Government Reform. Comey stated that there was "evidence of mishandling" of classified information and that he believed that Clinton was "extremely careless; I think she was negligent". He defended the FBI's recommendation against bringing charges because it "… would have been unfair and virtually unprecedented …" ^[161][162]

Responses and analysis

Clinton's initial response

Clinton spokesman Nick Merrill defended Clinton's use of the personal server and email accounts as being in compliance with the "letter and spirit of the rules". Clinton herself stated she had done so only as a matter of "convenience".^[163]

On March 10, 2015, while attending a conference at the headquarters of the United Nations in Manhattan, Clinton spoke with reporters for about 20 minutes.^[164] Clinton said she had used a private email for convenience, "because I thought it would be easier to carry just one device for my work and for my personal emails instead of two."^[165][166] It was later determined that Clinton had used both an iPad and a BlackBerry while Secretary of State.^{[165][167][168][169]}

Clinton turned over copies of 30,000 State Department business-related emails from her private server that belonged in the public domain; she later explained that she instructed her lawyer to err on the side of disclosure, turning over any emails that might be work-related. Her aides subsequently deleted about 31,000 emails from the server dated during the same time period that Clinton regarded as personal and private.^{[170][171][172]} State Department employees do have the right to delete personal emails.^[173]

Clinton has used humor to try to shrug off the scandals.^[174][175] In August 2015, when asked by a reporter whether she had "wiped" her server, Clinton laughed and said: "What? Like with a cloth or something? I don't know how it works digitally at all."^[176] In September 2015, Clinton was asked in an interview with Jimmy Fallon on The Tonight Show about the content of the emails. She laughed it off, saying there was nothing interesting and joking that she was offended people found her emails 'boring'.^[177]

Later responses

Clinton's responses to the question, made during her presidential campaign, evolved over time.^[159][178]

Clinton initially said that there was no classified material on her server. Later, after a government review discovered some of her emails contained classified information, she said she never sent or received information that was marked classified.^[159] Her campaign claimed other emails contained information that is now classified, but was retroactively classified by U.S. intelligence agencies after Clinton had received the material.^[179] See also the section above on the May 2016 IG report for a number of Clinton statements that were contradicted by the report, and how she and her supporters responded afterward.

Campaign spokesman Brian Fallon said: "She was at worst a passive recipient of unwitting information that subsequently became deemed as classified."^[179] Clinton campaign spokeswoman Jennifer Palmieri has "stressed that Clinton was permitted to use her own email account as a government employee and that the same process concerning classification reviews would still be taking place had she used the standard 'state.gov' email account used by most department employees."^[101][180] Palmieri later stated: "Look, this kind of nonsense comes with the territory of running for president. We know it, Hillary knows it, and we expect it to continue from now until Election Day."^[14]

In her first national interview about the 2016 presidential race, on July 7, 2015, Clinton was asked by CNN's Brianna Keilar about her use of private email accounts while serving as Secretary of State. She said:

Everything I did was permitted. There was no law. There was no regulation. There was nothing that did not give me the full authority to decide how I was going to communicate. Previous secretaries of state have said they did the same thing…. Everything I did was permitted by law and regulation. I had one device. When I mailed anybody in the government, it would go into the government system.^[181]

On September 9, 2015, Clinton apologized during an ABC News interview for using the private server, saying she was "sorry for that."^[182] Appearing on NBC's Meet the Press on September 27, 2015, Clinton defended her use of the private email server while she was secretary of state, comparing the investigations to Republican-led probes of her husband's presidential administration more than two decades ago, saying, "It is like a drip, drip, drip. And that's why I said, there's only so much that I can control".^[183]

Clinton and the State Department said the emails were not marked classified when sent. However, Clinton signed a non-disclosure agreement which stated that classified material may be "marked or unmarked".^{[184][185][186]} Additionally, the author of an email is legally required to properly mark it as classified if it contains classified material, and to avoid sending classified material on a personal device, such as the ones used exclusively by Clinton.^[187]

Clinton maintained that she did not send or receive any confidential emails from her personal server. In a Democratic debate with Bernie Sanders on February 4, 2016, Clinton said, "I never sent or received any classified material." In a Meet the Press interview on July 2, 2016, Clinton stated: "Let me repeat what I have repeated for many months now, I never received nor sent any material that was marked classified."^{[132][133][134]}

In an interview with Fox News in late July 2016, Clinton stated "Director Comey said my answers were truthful, and what I've said is consistent with what I have told the American people, that there were decisions discussed and made to classify retroactively certain of the emails." PolitiFact awarded Clinton four "Pinocchios", its worst rating, for her statement saying "While Comey did say there was no evidence she lied to the FBI, that is not the same as saying she told the truth to the American public."^{[188][189][190]}

Democratic response

In August 2015, the New York Times reported on "interviews with more than 75 Democratic governors, lawmakers, candidates and party members" on the email issue.^[191] The Times reported, "None of the Democrats interviewed went so far as to suggest that the email issue raised concerns about Mrs. Clinton's ability to serve as president, and many expressed a belief that it had been manufactured by Republicans in Congress and other adversaries."^[191] At the same time, many Democratic leaders showed increasing frustration among party leaders of Clinton's handling of the email issue. For example, Edward G. Rendell, former governor of Pennsylvania, a Clinton supporter, said that a failure of the Clinton campaign to get ahead of the issue early on meant that the campaign was "left just playing defense."^[191] Other prominent Democrats, such as Governor Dannel P. Malloy of Connecticut, were less concerned, noting the campaign was at an early stage and that attacks on Clinton were to be expected.^[191]

At the October 2015 primary debate, Clinton's chief rival for the Democratic presidential nomination, Senator Bernie Sanders of Vermont, defended Clinton, saying: "Let me say this. Let me say something that may not be great politics. But I think the secretary is right. And that is that the American people are sick and tired of hearing about your damn emails!"^[192][193] Sanders later clarified that he thought Clinton's emails were a "very serious issue",^[194] but Americans want a discussion on issues that are "real" to them, such as paid family and medical leave, college affordability, and campaign finance reform.^[193]

Republican response

Republican National Committee chairman Reince Priebus said, in a statement regarding the June 30, 2015 email releases, "These emails … are just the tip of the iceberg, and we will never get full disclosure until Hillary Clinton releases her secret server for an independent investigation."^[195] Trey Gowdy said on June 29, 2015, that he would press the State Department for a fuller accounting of Clinton's emails, after the Benghazi panel obtained 15 additional emails to Sidney Blumenthal that the department had not provided to the Committee.^[196]

On September 12, 2015, Republican Senators Charles Grassley and Ron Johnson, chairmen of the Senate Judiciary and Homeland Security committees, respectively, said they would seek an independent review of the deleted emails, if they were recovered from Clinton's server, to determine if there were any government related items among those deleted.^[121]

Comparisons and media coverage

Media commentators have drawn comparisons of Clinton's email usage to past political controversies. Pacific Standard Magazine published an article in May 2015, comparing email controversy and her response to it with the Whitewater investigation 20 years earlier.^[197]

In August 2015, Washington Post associate editor and investigative journalist Bob Woodward, when asked about Clinton's handling of her emails, said they remind him of the Nixon tapes from the Watergate scandal.^[198] On March 9, 2015, liberal columnist and Clinton supporter Dana Milbank wrote that the email affair was "a needless, self-inflicted wound" brought about by "debilitating caution" in "trying to make sure an embarrassing e-mail or two didn't become public", which led to "obsessive secrecy." Milibank pointed out that Clinton herself had justifiably criticized the George W. Bush administration in 2007 for its "secret" White House email accounts.^[199][200]

On Fox News Sunday, political analyst Juan Williams contrasted the media coverage of Clinton's emails to the coverage of the 2007 Bush White House email controversy.^[201]

The Milwaukee Journal Sentinel published an editorial opining that "the only believable reason for the private server in her basement was to keep her emails out of the public eye by willfully avoiding freedom of information laws. No president, no secretary of state, no public official at any level is above the law. She chose to ignore it, and must face the consequences."^[202][203] Pascal-Emmanuel Gobry wrote in The Week that "Clinton set up a personal email server, in defiance or at least circumvention of rules, with the probable motive of evading federal records and transparency requirements, and did it with subpar security."^[204]

Fox News apologizing for inaccurate reporting

On November 2, 2016, Fox News anchor Bret Baier reported that according to Fox's anonymous sources the FBI had discovered that Clinton’s private server had been hacked by "five foreign intelligence agencies".^[205][206] Baier further reported that according to an anonymous source an FBI investigation of the Clinton Foundation was "likely" to lead to an indictment of Hillary Clinton. ^[205][206] On November 4, 2016, he acknowledged that his assertions were a mistake, saying, "indictment obviously is a very loaded word", and that he was sorry.^{[207][205][206]}

House Select Committee on Benghazi

On March 27, 2015, Republican Congressman Trey Gowdy, Chairman of the Select Committee on Benghazi, asserted that some time after October 2014, Clinton "unilaterally decided to wipe her server clean" and "summarily decided to delete all emails."^[208][209] Clinton's attorney, David E. Kendall, said that day that an examination showed that no copies of any of Clinton's emails remained on the server. Kendall said the server was reconfigured to only retain emails for 60 days after Clinton lawyers had decided which emails needed to be turned over.^[210]

On June 22, 2015, the Benghazi panel released emails between Clinton and Sidney Blumenthal, who had been recently deposed by the committee. Committee chairman Gowdy issued a press release criticizing Clinton for not providing the emails to the State Department.^[211] Clinton had said she provided all work-related emails to the State Department, and that only emails of a personal nature on her private server were destroyed. The State Department confirmed that 10 emails and parts of five others from Sidney Blumenthal regarding Benghazi, which the Committee had made public on June 22, could not be located in the Department's records, but that the 46 other, previously unreleased Libya-related Blumenthal emails published by the Committee, were in the Department's records. In response, Clinton campaign spokesman Nick Merrill, when asked about the discrepancy said: "She has turned over 55,000 pages of materials to the State Department, including all emails in her possession from Mr. Blumenthal."^[212] Republican Committee members were encouraged about their probe, having found emails that Clinton failed to produce.^[212][213] Clinton campaign staff accused Gowdy and Republicans of "clinging to their invented scandal".^[213]

In response to comments that House Republican Majority Leader Kevin McCarthy made on September 29, 2015, about damaging Clinton's poll numbers,^[214] Minority Leader Nancy Pelosi threatened to end the Democrats' participation in the committee.^{[215][216][217]} Representative Louise Slaughter (D-NY) introduced an amendment to disband the committee, which was defeated in a party-line vote.^[218] On October 7, the editorial board of The New York Times called for the end of the committee.^[219] Representative Alan Grayson (D-FL) took step towards filing an ethics complaint, calling the committee "the new McCarthyism", alleging it was violating both House rules and federal law by using official funds for political purposes.^[220] Richard L. Hanna, (R-NY),^[221] and conservative pundit Bill O'Reilly acknowledged the partisan nature of the committee.^[222]

On October 22, 2015, Clinton testified before the Committee and answered members' questions for eleven hours before the Committee in a public hearing.^{[223][224][225]}

The New York Times reported that "the long day of often-testy exchanges between committee members and their prominent witness revealed little new information about an episode that has been the subject of seven previous investigations...Perhaps stung by recent admissions that the pursuit of Mrs. Clinton's emails was politically motivated, Republican lawmakers on the panel for the most part avoided any mention of her use of a private email server."^[223] The email issue did arise shortly before lunch, in "a shouting match" between Republican committee chair Trey Gowdy and two Democrats, Adam Schiff and Elijah Cummings.^[223] Late in the hearing, Republican Representative Jim Jordan of Ohio accused Clinton of changing her accounts of the email service, leading to a "heated exchange" in which Clinton said that she had erred in making a private email account, but denied having dealt with anything marked classified, instead seeking "to be transparent by publicly releasing her emails."^[223]

Freedom of Information lawsuits

Judicial Watch v. U.S. Department of State

Judicial Watch, a nonprofit advocacy organization, filed a complaint against the Department of State in the U.S. District Court for the District of Columbia on September 10, 2013, seeking records under the federal Freedom of Information Act relating to Clinton aide Huma Abedin (a former deputy chief of staff and former senior advisor at the State Department).^[226][227] Judicial Watch was particularly interested in Abedin's role as a "special government employee" (SGE), a consulting position which allowed her to represent outside clients while also serving at the State Department. After corresponding with the State Department, Judicial Watch agreed to dismiss its lawsuit on March 14, 2014.^[226] On March 12, 2015, in response to the uncovering of Clinton's private email account, it filed a motion to reopen the suit, alleging that the State Department had misrepresented its search and had not properly preserved and maintained records under the act.^[226] U.S. District Judge Emmet G. Sullivan granted the motion to reopen the case on June 19, 2015.^[228][229]

On July 21, 2015, Judge Sullivan issued supplemental discovery orders, including one that Clinton, Abedin, and former Deputy Secretary of State Cheryl Mills disclose any required information they had not disclosed already, and promise under oath that they had done so, including a description of the extent Abedin and Mills had used Clinton's email server for official government business.^[230][231]

On August 10, 2015, Clinton filed her declaration, stating "I have directed that all my emails on clintonemail.com in my custody that were or potentially were federal records be provided to the Department of State", and that as a result of this directive, 55,000 pages of emails were produced to the Department on December 5, 2014.^{[232][233][234]} She said in her statement that Abedin did have an email account through clintonemail.com that "was used at times for government business", but that Mills did not.^{[232][233][234]} The statement was filed as Clinton faced questions over fifteen emails in exchanges with Blumenthal that were not among the emails she gave to the department the previous year. She did not address the matter of those emails in the statement.^[233] On September 25, 2015, several additional emails from her private server^[235] surfaced which she had not provided to the State Department.^{[235][236][237]} These emails between Clinton and General David Petraeus, discussing personnel matters, were part of an email chain that started on a different email account before her tenure as Secretary of State,^{[235][236][237]} but continued onto her private server in late January 2009 after she had taken office.^{[235][236][237]} The existence of these emails also called into question Clinton's previous statement that she did not use the server before March 18, 2009.^[238]

In February 2016, Judge Sullivan issued a discovery order in the case, ruling that depositions of State Department officials and top Clinton aides were to proceed.^[239] On May 26, 2016, Judicial Watch released the transcript of the deposition of Lewis Lukens,^[240] on May 31, 2016, the transcript of Cheryl Mills,^[241] on June 7, 2016, the transcript of Ambassador Stephen Mull,^[242] and on June 9, 2016, Karin Lang, Director of Executive Secretariat Staff.^[243]

The testimony of Clarence Finney, who worked in the department responsible for FOIA searches, said that he first became curious about Clinton's email setup after seeing the Texts from Hillary meme on the Internet.^[244]

Jason Leopold v. U.S. Department of State

In November 2014, Jason Leopold of Vice News made a Freedom of Information Act request for Clinton's State Department records,^[245][246] and, on January 25, 2015, filed a lawsuit in the U.S. District Court for the District of Columbia seeking to compel production of responsive documents.^{[245][246][247]} After some dispute between Leopold and the State Department over the request, U.S. District Judge Rudolph Contreras ordered rolling production and release of the emails on a schedule set by the State Department.^{[248][249][250]}

Over the next several months, the State Department completed production of 30,068 emails, which were released in 14 batches, with the final batch released on February 29, 2016.^[251] Both the Wall Street Journal and Wikileaks independently set up search engines for anyone who would like to search through the Clinton emails released by the State Department.^[252][253]

The emails showed that Blumenthal communicated with Clinton while Secretary on a variety of issues including Benghazi.^{[195][254][255][256]}

Associated Press v. U.S. Department of State

On March 11, 2015, the day after Clinton acknowledged her private email account, the Associated Press (AP) filed suit against the State Department regarding multiple FOIA requests over the past five years. The requests were for various emails and other documents from Clinton's time as secretary of state and were still unfulfilled at the time.^{[257][258][259]} The State Department said that a high volume of FOIA requests and a large backlog had caused the delay.^[257][260]

On July 20, 2015, U.S. District Judge Richard J. Leon reacted angrily to what he said was "the State Department for four years dragging their feet".^[260] Leon said that "even the least ambitious bureaucrat" could process the request faster than the State Department was doing.^[261]

On August 7, 2015, Leon issued an order setting a stringent schedule for the State Department to provide the AP with the requested documents over the next eight months.^[259] The order issued by Leon did not include the 55,000 pages of Clinton emails the State Department scheduled to be released in the Leopold case, or take into account 20 boxes given to the State Department by Philippe Reines, a former Clinton senior adviser.^[259]

Other suits and coordination of email cases

In September 2015, the State Department filed a motion in court seeking to consolidate and coordinate the large number of Freedom of Information Act lawsuits relating to Clinton and Clinton-related emails. There were at the time at least three dozen lawsuits are pending, before 17 different judges.^[262][263]

In an U.S. District Court for the District of Columbia order issued on October 8, 2015, Chief U.S. District Judge Richard W. Roberts wrote that the cases did not meet the usual criteria for consolidation but: "The judges who have been randomly assigned to these cases have been and continue to be committed to informal coordination so as to avoid unnecessary inefficiencies and confusion, and the parties are also urged to meet and confer to assist in coordination."^[263]

In 2015, Judicial Watch and the Cause of Action Institute filed two lawsuits seeking a court order to compel the Department of State and the National Archives and Records Administration to recover emails from Clinton's server. In January 2016, these two suits (which were consolidated because they involved the same issues) were dismissed as moot by U.S. District Judge James Boasberg, because the government was already working to recover and preserve these emails.^[264]

In March 2016, the Republican National Committee filed four new complaints in the U.S. District Court for the District of Columbia stemming from Freedom of Information Act requests it had filed the previous year. These new filings brought the total number of civil suits over access to Clinton's records pending in federal court to at least 38.^[265]

In June 2016, in response to the Republican National Committee's complaints filed on March 2016, the State Department estimates it will take 75 years to complete the review of documents which are responsive to the complaints.^[266] It has been observed that a delay of this nature would cause the documents to remain out of public view longer than the vast majority of classified documents which must be declassified after 25 years.

See also

• 2016 Democratic National Committee email leak
• BleachBit Controversy
• Bush White House email controversy
• Clinton Foundation–State Department controversy
• White House FBI files controversy

References

External links

Wikimedia Commons has media related to Hillary Rodham Clinton email use as United States Secretary of State.

• Press release by the National Archives and Records Administration
• Secretary Clinton Emails at the United States Department of State website
• The Facts About Hillary Clinton’s Emails at the Hillary Clinton campaign website
• Clinton E-Mail Investigation by the Federal Bureau of Investigation