In an exclusive interview with Fox News, Marcel Lehel Lazar, a Romanian hacker better known as Guccifer, claims he breached Hillary Clinton’s private server on two occasions.

Lazar was able to guess a security question and gain access to an email account belonging to Clinton confidante Sidney Blumenthal in 2013. Once inside, he saw email traffic between Blumenthal and Clinton and claims he then gained access to Clinton’s server. Fox News’ Catherine Herridge reports:

The 44-year-old Lazar said he first compromised Clinton confidant Sidney Blumenthal’s AOL account, in March 2013, and used that as a stepping stone to the Clinton server. He said he accessed Clinton’s server “like twice,” though he described the contents as “not interest[ing]” to him at the time.

“I was not paying attention. For me, it was not like the Hillary Clinton server, it was like an email server she and others were using with political voting stuff,” Guccifer said.

Lazar said he did not use the same security question method to access Clinton’s server. He tells Fox News he checked the originating IP address and then “scanned with an IP scanner.” Three security specialists tell Fox News the method Lazar describes to gain access to Clinton’s server is plausible though his claims could not be confirmed.

Hillary Clinton has claimed that her server was never breached by anyone. A NY Times story published in March said security logs turned over to the FBI by Bryan Pagliano showed no evidence anyone had breached the server. However, Lazar not only claims he hacked the site but tells Fox News he saw evidence the site had been accessed by people from around the world, “As far as I remember, yes, there were … up to 10, like, IPs from other parts of the world.”

Is any of this true? Well, Lazar definitely had access to Blumenthal’s email server. Beyond that, former CTO for the DIA Bob Gourley tells Fox News, “Unfortunately, in this community, a lot people make up stories and it’s hard to tell what’s really true until you get into the forensics information and get hard facts.” Of course, if the FBI is able to corroborate any of Lazar’s claims it would be a problem for the Clinton camp which has maintained for over a year the server was never breached.