He got away with it. That’s all.
Nothing happened to Sandy, just as nothing happened to Bill just as nothing will happen to Hillary.
Well, he had to pay a civil fine and was put on probation for 2 years and lost his security clearance for...wait for it...three whole years. Now lets review what he did:
On July 19, 2004, it was revealed that the U.S. Department of Justice was investigating Berger for unauthorized removal of classified documents in October 2003 from a National Archives reading room prior to testifying before the 9/11 Commission. The documents were five classified copies of a single report commissioned from Richard Clarke covering internal assessments of the Clinton Administration’s handling of the unsuccessful 2000 millennium attack plots. An associate of Berger said Berger took one copy in September 2003 and four copies in October 2003, allegedly by stuffing the documents into his socks and pants.[19][20] Berger subsequently lied to investigators when questioned about the removal of the documents.[21]
In April 2005, Berger pleaded guilty to a misdemeanor charge of unauthorized removal and retention of classified material from the National Archives in Washington.[22
I guess private removal via your socks is worse than a private server. Main thing is, the rich and famous and well-connected don’t get the book thrown at them.