Are all the servers and devices accounted for?
Was there a protocol for disposal of servers and devices containing top secret and or classified information?
There is no protocol for conducting official, private and secret government business on a private server.