Hillary Clinton did not comply with government policies for avoiding cybersecurity risks while serving as Secretary of State, an internal State Department audit has found.
She has not commented on the inspector general's report, which was released to US lawmakers on Wednesday.
Separately from the State Department audit, FBI agents have been probing whether Mrs Clinton's use of the private server violated federal laws in regard to classified documents.
Meanwhile, a Romanian hacker known as Guccifer, who claimed he infiltrated Mrs Clinton's email server, pleaded guilty in US court on Wednesday to charges of identity theft and other offences.
Marcel Lazar, 44, was best known for alleged hacks into accounts held by the Bush family that revealed private family photos and paintings.
He made headlines again earlier this month after making the unsubstantiated claim that he hacked Mrs Clinton's server.