Actually, that’s not the role of counterintelligence. The role of CI is to deny, thwart, deceive the efforts of foreign adversaries. Monitoring is the role of security/cybersecurity/insider threat activities, but even they can’t monitor networks of which they’re not aware - thus the reason for the existence of the private server in the first place.
I agree with you on the circulation issue, but intelligence agencies (including our own) will trade intel when they can use it to their advantage or gain leverage by making it known.
I’ve now read that she may have been being passed blocks of information and instructed to place it where it could be hacked—by those higher than her.