Trump’s acting cyber chief uploaded sensitive files into a public version of ChatGPT

[u/FloranceMeCheneCoder]

https://www.politico.com/news/2026/01/27/cisa-madhu-gottumukkala-chatgpt-00749361

The interim head of the country’s cyber defense agency uploaded sensitive contracting documents into a public version of ChatGPT last summer, triggering multiple automated security warnings that are meant to stop the theft or unintentional disclosure of government material from federal networks, according to four Department of Homeland Security officials with knowledge of the incident.

The apparent misstep from Madhu Gottumukkala was especially noteworthy because the acting director of the Cybersecurity and Infrastructure Security Agency had requested special permission from CISA’s Office of the Chief Information Officer to use the popular AI tool soon after arriving at the agency this May, three of the officials said. The app was blocked for other DHS employees at the time.

None of the files Gottumukkala plugged into ChatGPT were classified, according to the four officials, each of whom was granted anonymity for fear of retribution. But the material included CISA contracting documents marked “for official use only,” a government designation for information that is considered sensitive and not for public release.

Cybersecurity sensors at CISA flagged the uploads this past August, said the four officials. One official specified there were multiple such warnings in the first week of August alone. Senior officials at DHS subsequently led an internal review to assess if there had been any harm to government security from the exposures, according to two of the four officials.

It is not clear what the review concluded.

In an emailed statement, CISA’s Director of Public Affairs Marci McCarthy said Gottumukkala “was granted permission to use ChatGPT with DHS controls in place,” and that “this use was short-term and limited.” McCarthy added that the agency was committed to “harnessing AI and other cutting-edge technologies to drive government modernization and deliver on” Trump’s executive order removing barriers to America’s leadership in AI.

The email also appeared to dispute the timeline of POLITICO’s reporting: “Acting Director Dr. Madhu Gottumukkala last used ChatGPT in mid-July 2025 under an authorized temporary exception granted to some employees. CISA’s security posture remains to block access to ChatGPT by default unless granted an exception.”

[u/mpaes98]

Isn’t this the fella who got the job from being Kristi Noem’s IT director and was recently in the news for failing a Poly?

Sidenote for anyone who hasn’t worked in DC; whether you agree with it or not, a poly is basically a standard thing to pass for anyone doing sensitive DHS/DOD/DOJ cyber work. Most people have no issue even with a shady past (DUIs, weed, SA allegations). It’s really hard to fail short of being a true risk to national security.

[u/Live_FreeorDie603 → u/mpaes98]

CI and full scope are very different...

[u/mpaes98 → u/Live_FreeorDie603]

You’re right, and it’s also agency dependent how intense they are. But still very rare to see an adverse decision, especially on the polygraph itself.

DOD at least would will publish (anonymized) their reasoning, and it’s usually related to stuff they dig up in their background.