[Zigurd]

> How is this supposed to be a scandal exactly?

Classified information security, for one thing. Exposing highly sensitive information via an infrastructure run by unknown persons, presumably without clearances, or acting against the conditions of their clearances if they have them.

One specific law about document retention is mentioned in connection with this case, but this is also a big security issue, with laws and regulations that apply, as well.

There are probably other ethics, regulatory, and legal issues once you get into who she was corresponding with on what topics and how those people used the information they obtained.