Its bad for her because sensitive information was on her server that was not properly classified.
Even tho as SoS she should’ve known what information that should have been classified, that’s what her “out” will be blaming some poor slug who sent it to her
That “poor slug” needs to be interrogated. He/she knew what they were doing, and who told them to do it. A good ad determined investigator will go up the chain.