Someone (Huma, her husband, whoever) could have just set the "Mail forwarder" settings on Hillary's domain account to forward a copy of all mail to the yahoo address, or anywhere they wanted. Anyone not familiar with domain account control panel and it's settings would never know it was happening. Just one of the reasons why this private unsecured server thing was like a leaky sieve.