Indian-origin US cyber agency chief shared sensitive documents on ChatGPT: Report

In a moment of irony that has rippled through Washington’s cybersecurity circles, the head of the US agency tasked with protecting government networks reportedly uploaded sensitive internal documents to a public version of ChatGPT.

According to Politico, Madhu Gottumukkala, the acting director of the Cybersecurity and Infrastructure Security Agency (CISA), shared contracting and cybersecurity-related materials with the AI platform last summer for work purposes, triggering automated security alerts and an internal review.

The documents were not classified but were marked “For Official Use Only,” a designation meant to restrict public disclosure. Multiple Department of Homeland Security officials told Politico that the uploads set off safeguards designed to prevent sensitive government information from being exposed.

WHO IS MADHU GOTTUMUKKALA?

Gottumukkala is of Indian origin and is responsible for protecting federal networks from sophisticated, state-backed cyber threats, including those linked to Russia and China.

Dr. Gottumukkala holds a Ph.D. in Information Systems from Dakota State University, an MBA in Engineering and Technology Management from the University of Dallas, an M.S. in Computer Science from the University of Texas at Arlington, and a BE in Electronics and Communication Engineering from Andhra University.

Senior DHS officials launched an internal review in August to determine whether any government systems or infrastructure were compromised. The outcome of that review has not been made public.

Gottumukkala had obtained special permission to use ChatGPT, which most DHS employees are barred from accessing. Data entered into the public version of ChatGPT, built by OpenAI, can potentially be retained and used to improve the system, raising concerns about wider exposure.

CISA sought to downplay the episode. In an emailed statement to Politico, agency spokesperson Marci McCarthy said Gottumukkala was granted permission to use ChatGPT with DHS controls in place, describing the usage as short-term and limited.

“Acting Director Dr. Madhu Gottumukkala last used ChatGPT in mid-July 2025 under an authorized temporary exception,” McCarthy said, adding that CISA’s default position remains to block access to the tool unless an exception is granted.

The incident has drawn added scrutiny because of Gottumukkala’s recent controversies. Politico had earlier reported that several CISA staffers were placed on leave last year after Gottumukkala failed a polygraph test he had pushed to implement. He has denied failing the test, telling lawmakers he did not accept the premise of that characterization.

- Ends