Acting CISA chief uploaded 'for official use only' documents to ChatGPT, report says

Acting CISA chief uploaded 'for official use only' documents to ChatGPT, report says — Techcrunch.com
Image source: Techcrunch.com

The acting head of the U.S. Cybersecurity and Infrastructure Security Agency (CISA), Madhu Gottumukkala, appointed by Trump, uploaded sensitive contracting documents marked "for official use only" to ChatGPT, Politico reported Tuesday, January 28, 2026. Officials told Politico that Gottumukkala's uploads triggered multiple automated security warnings designed to prevent the theft or inadvertent disclosure of government files from federal networks.

The report says he had been granted an exception to use ChatGPT earlier in his tenure while other employees were prohibited. The Department of Homeland Security sought to determine whether the uploads harmed government security, according to the report. Politico noted that uploading unclassified but internal government documents to a public large language model can allow the model to train on that information and potentially expose it to other users.

A CISA spokesperson told Politico that Gottumukkala's use of ChatGPT was "short-term and limited." The report also says that before joining CISA he served as chief information officer of South Dakota under then-governor Kristi Noem. Politico reported that Gottumukkala reportedly failed a counterintelligence polygraph after his appointment, which Homeland Security later called "unsanctioned," and that six career CISA staff were suspended from accessing classified information.

madhu gottumukkala, cisa acting director, uploaded to chatgpt, for official use only, sensitive contracting documents, automated security warnings, exception to use chatgpt, department of homeland security, politico report, public large language model, unclassified internal documents, model training risks, short-term limited use, failed counterintelligence polygraph, unsanctioned polygraph, six career cisa staff, suspended from classified access, chief information officer, south dakota cio, kristi noem, government security harm, cisa spokesperson statement, large language model exposure

Latest in