US Cybersecurity Official Investigated for Uploading Documents to ChatGPT

Madhu Gottumukkala, the Acting Director and Deputy Director of the Cybersecurity and Infrastructure Security Agency (CISA) in the United States, is under investigation for allegedly uploading sensitive documents to a public version of the AI chatbot ChatGPT. This incident reportedly occurred in 2025, as reported by Politico, which cited sources from the Department of Homeland Security (DHS).

While details surrounding the incident remain unclear, it has been confirmed that Mr. Gottumukkala uploaded non-classified content, which included CISA contracting documents that were designated for official use only. The activities were flagged in August, prompting an internal review within the DHS.

According to Politico, there is an agency policy that generally restricts access to ChatGPT, allowing it only on an exceptional basis. Allegations have emerged that Mr. Gottumukkala compelled CISA to grant him access to the platform despite this policy. Concerns arise from the fact that public AI chatbots typically do not meet the stringent cybersecurity standards required for government employees, raising fears that uploaded documents could potentially be accessed by artificial intelligence companies, used in legal proceedings, or even indexed online.

Holding over 24 years of experience in information technology, Madhu Gottumukkala plays a crucial role in leading CISA’s efforts to understand, manage, and diminish risks associated with the cybersecurity and physical infrastructure relied upon by the American populace. His educational background includes a Ph.D. in Information Systems from Dakota State University, an MBA in Engineering and Technology Management from the University of Dallas, a Master’s degree in Computer Science from the University of Texas at Arlington, and a Bachelor of Engineering in Electronics and Communication Engineering from Andhra University.

As the investigation unfolds, the implications of using public AI platforms for official purposes could lead to heightened scrutiny of cybersecurity practices within federal agencies. The results of the DHS review into Mr. Gottumukkala’s actions are eagerly awaited, as they may impact the regulatory oversight of technology usage by government officials.