OK now I get it. I was misinterpreting the meaning of the “other” e-mail addresses... thinking this was somehow a CC: from HRC, to them, and not about other hackers on the inside. Truly damning.
Not sure about saying email addresses. It would have been IP addresses that he would have seen accessing her account.