Back Interestingengineering Trump's cyber chief fed sensitive US documents into public ChatGPT
The acting head of the U.S. Cybersecurity and Infrastructure Security Agency uploaded sensitive government documents into a public version of ChatGPT last summer, triggering internal security alarms, according to multiple Department of Homeland Security officials.
POLITICO first reported the incident, which involved Dr. Madhu Gottumukkala, CISA’s interim director and the agency’s senior-most political official.
The uploads raised concerns inside DHS because the agency oversees federal cyber defense against foreign adversaries, including Russia and China.
None of the documents were classified. However, officials said the files carried “for official use only” markings and were not meant for public release.
Four DHS officials said Gottumukkala uploaded contracting documents into ChatGPT during the summer.
Automated cybersecurity sensors flagged the activity in August, including multiple alerts during the first week alone.
The officials spoke on condition of anonymity due to fear of retaliation.
The incident stood out because Gottumukkala had requested special approval to use ChatGPT shortly after joining CISA in May. At the time, DHS blocked the tool for most employees.
“He forced CISA’s hand into making them give him ChatGPT, and then he abused it,” one official said.
The files went into a public version of ChatGPT. Any data uploaded into that version becomes accessible to OpenAI and may train future responses.
OpenAI has said the platform has more than 700 million total active users.
Other AI tools approved for DHS staff operate differently. DHS’s internal chatbot, DHSChat, prevents information from leaving federal networks.
Senior DHS leaders launched an internal review after detecting the uploads. Officials assessed whether the exposure harmed government security.
It remains unclear what the review concluded.
Gottumukkala later met with senior DHS officials to review what he uploaded, two officials said. The discussions involved DHS’s then-acting general counsel, Joseph Mazzara, and Chief Information Officer Antoine McCord.
CISA officials also briefed Gottumukkala in August. Those meetings included CIO Robert Costello and Chief Counsel Spencer Fisher, according to the officials.
DHS policy requires agencies to investigate any exposure of sensitive material. Officials must also determine whether disciplinary action applies.
Options can include retraining, formal warnings, or clearance reviews.
Mazzara and Costello did not respond to requests for . McCord and Fisher could not be reached.
CISA disputed parts of POLITICO ‘s reporting in an emailed statement.
“Was granted permission to use ChatGPT with DHS controls in place,” said Marci McCarthy , CISA’s director of public affairs. She added that “this use was short-term and limited.”
McCarthy also said Gottumukkala “last used ChatGPT in mid-July 2025 under an authorized temporary exception granted to some employees.”
She added that “CISA’s security posture remains to block access to ChatGPT by default unless granted an exception.”
McCarthy said the agency remains committed to “harnessing AI and other cutting-edge technologies to drive government modernization and deliver on” Trump ‘s executive order removing barriers to U.S. leadership in AI.
The ChatGPT incident adds to recent turmoil inside CISA.
This summer, six career staff members went on leave after Gottumukkala failed a counterintelligence polygraph he requested. DHS later described the test as “unsanctioned.”
Asked the failure during congressional testimony, Gottumukkala said he did not “accept the premise of that characterization.”
Last week, Gottumukkala also attempted to remove CISA CIO Costello. Other political appointees intervened and blocked the move.
Gottumukkala has led CISA in an acting role since May.
President Donald Trump’s nominee to permanently lead the agency, Sean Plankey, remains unconfirmed.
Aamir is a seasoned tech journalist with experience at Exhibit Magazine, Republic World, and PR Newswire. With a deep love for all things tech and science, he has spent years decoding the latest innovations and exploring how they shape industries, lifestyles, and the future of humanity.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
