The acting head of the US government’s top cyber defense agency is under scrutiny after sensitive government documents were uploaded to a public version of ChatGPT, triggering internal security alerts and raising fresh questions about how federal agencies are using artificial intelligence.

According to a Politico report citing multiple Department of Homeland Security officials, the incident involved Madhu Gottumukkala, the acting director of the Cyber security and Infrastructure Security Agency, or CISA. While none of the files were classified, some were marked “for official use only”, a label meant to keep information out of public circulation.

The episode offers a revealing case study in the risks of AI adoption inside government, especially when senior officials test the boundaries of rules designed to protect sensitive data.

What exactly happened at CISA?

Last summer, cyber security monitoring systems inside DHS detected that sensitive contracting documents had been uploaded into a publicly accessible version of ChatGPT. Automated alerts flagged the activity almost immediately, with multiple warnings recorded within the first week.

The uploads were traced back to Gottumukkala, who had joined CISA in May and was serving as its interim leader. At the time, ChatGPT was broadly blocked across DHS systems, reflecting federal concerns about data leakage through commercial AI tools.

According to the report, Gottumukkala sought and received special approval from the agency’s Office of the Chief Information Officer to use ChatGPT under limited conditions. Despite that authorization, the uploads still triggered alarms meant to stop government material from leaving secure systems.

Senior DHS officials launched an internal review to assess whether the disclosures posed any risk to government operations. The outcome of that review has not been made public.

Why “for official use only” still matters

A key detail in this story is that the documents were not classified. That distinction matters legally, but it does not mean the information was harmless.

“For official use only” is applied to government material that could create operational, financial, or security risks if disclosed. In this case, the files reportedly included contracting information, which can reveal:

• Vendor relationships and pricing structures
• Internal procurement processes
• Operational priorities or vulnerabilities

While uploading such material does not carry the same penalties as mishandling classified intelligence, it still violates federal handling rules and can expose agencies to fraud, competitive harm, or cyber exploitation.

How ChatGPT access works inside DHS

The controversy highlights an important technical distinction that often gets lost in public debate: not all AI tools are treated equally inside government.

Politico reported that information entered into the public version of ChatGPT is shared with OpenAI and may be used to improve the model’s responses for other users. That creates an obvious risk for agencies handling sensitive data.

By contrast, DHS-approved tools like DHSChat are designed to keep information inside federal systems, preventing data from being reused or accessed externally.

According to CISA’s public affairs director, Gottumukkala’s use of ChatGPT was:

• Authorized under a temporary exception
• Subject to DHS controls
• Short-term and limited, ending in mid-July 2025

Even so, default DHS policy continues to block ChatGPT access unless an explicit exception is granted.

Why this incident set off alarms internally

After the activity was flagged, Gottumukkala met with senior DHS leaders to review what had been uploaded and assess potential risks. Participants reportedly included:

• Then-acting DHS general counsel Joseph Mazzara
• DHS chief information officer Antoine McCord
• CISA CIO Robert Costello
• CISA chief counsel Spencer Fisher

Federal policy requires agencies to investigate not just what was exposed, but why it happened and whether disciplinary action is warranted.

One DHS official quoted by Politico was blunt, alleging that Gottumukkala pushed the agency to grant him ChatGPT access and then misused it. That accusation has not been independently verified, but it underscores internal frustration over leadership setting a risky precedent.

How leadership and accountability come into play

The episode lands at a delicate moment for CISA, which has been without a Senate-confirmed director for months. Gottumukkala has led the agency in an acting capacity since May, following his appointment by DHS Secretary Kristi Noem.

President Donald Trump’s nominee to permanently lead CISA, Sean Plankey, remains stalled after his confirmation was blocked last year. In that vacuum, acting leadership carries outsized influence, both operationally and culturally.

Critics argue that when top officials bend or test rules, it can weaken compliance across the organization. Supporters counter that limited experimentation is necessary if the government wants to keep pace with rapid advances in AI.

A pattern of controversy at CISA

The ChatGPT incident is not the only challenge facing Gottumukkala’s tenure.

Earlier this summer, at least six career employees were placed on leave following an unsanctioned counterintelligence polygraph he requested. During congressional testimony last week, Gottumukkala rejected the premise that the action was improper.

More recently, Politico reported that Gottumukkala attempted to remove CISA CIO Robert Costello from his post, a move that was halted after intervention by other political appointees.

Taken together, these episodes suggest deeper tensions inside an agency tasked with defending the nation’s digital infrastructure while navigating political oversight.

Why this matters beyond one agency

At its core, this story is about more than a single official or a single upload. It exposes a broader challenge facing governments worldwide: how to adopt powerful AI tools without undermining security norms built for a pre-AI era.

Key questions remain unresolved:

• Should senior officials be held to stricter standards than rank-and-file employees when it comes to AI use?
• Are existing controls sufficient to prevent accidental data leaks?
• How quickly can government systems adapt without sacrificing trust?

TL;DR

• The acting head of CISA uploaded sensitive, unclassified documents to a public version of ChatGPT.
• Automated security systems flagged the uploads, triggering an internal DHS review.
• The incident highlights tensions between AI experimentation and strict data handling rules.
• It also raises leadership and accountability questions at a time when CISA lacks a confirmed director.

As federal agencies push to harness AI, this episode serves as a cautionary tale: innovation without guardrails can create risks that even cyber security leaders cannot ignore.