AI gone wrong! CISA chief Madhu Gottumukkala uploaded sensitive files to ChatGPT

Washington: The acting head of the US Cybersecurity and Infrastructure Security Agency (CISA) reportedly uploaded sensitive contracting files into a public version of ChatGPT last summer, triggering automated security alerts meant to prevent the exposure of government material, Politico reported, citing four Department of Homeland Security (DHS) officials familiar with the matter.

The incident involved acting CISA director Madhu Gottumukkala, who requested special approval from the agency’s Office of the Chief Information Officer to use ChatGPT shortly after joining CISA in May, at a time when the tool remained blocked for most DHS employees.

Also Read | President Trump struggles to recall ‘Alzheimer’s’ while discussing father’s illness

While none of the documents were classified, officials said they included contracting files marked “for official use only,” a designation for sensitive government information not intended for public release.

Cybersecurity monitoring systems detected the uploads in August, with multiple alerts recorded during the first week alone, according to Politico. Senior DHS leadership launched an internal review to evaluate whether the disclosures had compromised government security, though the findings of that review remain unclear.

After the uploads were flagged, Gottumukkala met with senior DHS leaders to review what had been shared. Politico reported that then-acting DHS general counsel Joseph Mazzara and DHS chief information officer Antoine McCord were involved in assessing potential risks. Gottumukkala also met with CISA CIO Robert Costello and chief counsel Spencer Fisher in August to discuss proper handling of sensitive material.

Also read | ‘We just screwed that up’: OpenAI’s Sam Altman on GPT-5.2 writing problems | WATCH

In response, CISA Director of Public Affairs Marci McCarthy told Politico that Gottumukkala “was granted permission to use ChatGPT with DHS controls in place,” adding that “this use was short-term and limited.” She emphasised that the agency continues to harness “AI and other cutting-edge technologies to drive government modernisation and deliver on” President Trump’s executive order to remove barriers to US AI leadership.

McCarthy further stated, “Acting Director Dr Madhu Gottumukkala last used ChatGPT in mid-July 2025 under an authorised temporary exception granted to some employees. CISA's security posture remains to block access to ChatGPT by default unless granted an exception.”

According to Politico, information entered into the public version of ChatGPT is shared with OpenAI and may be used to generate responses for other users. By contrast, AI tools approved for DHS staff, such as the agency’s internal chatbot DHSChat, are designed to prevent data from leaving federal systems.

One official told Politico, “Gottumukkala forced CISA's hand into making them give him ChatGPT, and then he abused it.”

Federal employees receive training on handling sensitive material, and DHS policy mandates investigations into the “cause and effect” of any exposure of official-use documents, including whether disciplinary action is warranted. Measures can range from retraining to more severe consequences, such as suspension or revocation of security clearance, officials said.

Gottumukkala, the most senior political official at CISA, has led the agency in an acting capacity since May, following his appointment by DHS Secretary Kristi Noem. Politico noted that Trump’s nominee to permanently lead CISA, Sean Plankey, remains stalled after his confirmation was blocked last year.

The report also highlighted controversies during Gottumukkala’s tenure. Earlier this summer, at least six career employees were placed on leave following an “unsanctioned” counterintelligence polygraph requested by Gottumukkala. During Congressional testimony last week, he told Rep. Bennie Thompson that he did not “accept the premise of that characterisation.”

Separately, Politico reported that Gottumukkala attempted to remove Costello from his post last week, a move that was stopped after intervention by other political appointees at the agency.