Trump's Indian-Origin Cyber Chief Uploaded Sensitive US Government Files to ChatGPT: Report

The acting head of the United States Cybersecurity and Infrastructure Security Agency, the federal body tasked with protecting government networks and sensitive information, uploaded internal contracting documents into a public version of ChatGPT last summer, triggering automated security alerts designed to prevent unauthorised disclosures, according to ANI quoting Politico.

The incident involved Madhu Gottumukkala, who has been serving as acting director of CISA since May after his appointment by Department of Homeland Security Secretary Kristi Noem. Politico, citing four DHS officials familiar with the matter, reported that Gottumukkala uploaded contracting files marked “for official use only”, a designation used for sensitive government information not meant for public release, though none of the documents were classified.

Soon after joining CISA in May, Gottumukkala sought and received special permission from the agency’s Office of the Chief Information Officer to use ChatGPT at a time when access to the tool remained blocked for most DHS employees. Cybersecurity monitoring systems later detected the uploads in August, with multiple alerts recorded during the first week alone.

DHS Orders Internal Review

The alerts prompted senior DHS leadership to initiate an internal review to determine whether the disclosures had compromised government security. The outcome of that review has not been made public.

Following the detection, Gottumukkala met senior DHS leaders to examine what had been uploaded. Those involved in evaluating potential risks included then acting DHS general counsel Joseph Mazzara and DHS chief information officer Antoine McCord. In August, Gottumukkala also held meetings with CISA chief information officer Robert Costello and chief counsel Spencer Fisher to discuss the incident and the appropriate handling of sensitive material.

In a statement emailed to Politico, CISA Director of Public Affairs Marci McCarthy said Gottumukkala “was granted permission to use ChatGPT with DHS controls in place”, adding that the use was “short-term and limited”. She said the agency remained committed to “harnessing AI and other cutting-edge technologies to drive government modernisation and deliver on” President Donald Trump’s executive order aimed at removing barriers to US leadership in artificial intelligence.

Internal Controls and Accountability Under Scrutiny

McCarthy also said that Gottumukkala last used ChatGPT in mid-July 2025 under an authorised temporary exception granted to some employees, and stressed that CISA’s security posture continues to block access to ChatGPT by default unless an exception is approved.

Politico noted that information entered into the public version of ChatGPT is shared with OpenAI and may be used to help generate responses for other users. OpenAI’s app has more than 700 million total active users. By contrast, AI tools approved for DHS employees, including the internal chatbot DHSChat, are configured to ensure data does not leave federal systems.

One official quoted by Politico said, “Gottumukkala forced CISA’s hand into making them give him ChatGPT, and then he abused it.” Federal employees receive regular training on handling sensitive information, and DHS policy requires investigations into the cause and effect of any exposure of official use documents, including whether disciplinary action is warranted.

Possible Disciplinary Action

Potential consequences can range from retraining to more serious measures such as suspension or revocation of security clearance.

Gottumukkala is currently the most senior political official at CISA, which is responsible for defending government networks against sophisticated, state-backed cyber threats from adversarial nations such as Russia and China. An Indian-origin technology professional with more than 24 years of experience in information technology, he holds a PhD in Information Systems from Dakota State University, an MBA in Engineering and Technology Management from the University of Dallas, a master’s degree in Computer Science from the University of Texas at Arlington, and a bachelor’s degree in Electronics and Communication Engineering from Andhra University.

His leadership comes at a time when the agency lacks a confirmed director. Trump’s nominee to permanently lead CISA, Sean Plankey, remains stalled after his confirmation was blocked last year, and no date has been set for a new hearing.

(With inputs from ANI)