Hacked or not. Using a personal email account and private server constitute GROSS NEGLIGENCE.
Then we get to the part where the domain registration date indicates premeditation, which was also lied about (the “convenience” lie).
But there was no INTENT to break the law.
No INTENT to expose classified, secret, top secret, SAP, etc. information to ANYONE not cleared for such information.
Therefore.....she skates.