US Authorities Launch Probe After Senior Cybersecurity Official Uploads Internal Documents to ChatGPT
US authorities have opened a formal investigation after Madu Gottumukkala, the acting head of the Cybersecurity and Infrastructure Security Agency (CISA), uploaded internal government documents marked “For Official Use Only” to ChatGPT, triggering widespread controversy and concerns over government data security.
The incident reportedly activated multiple automated security alerts within US federal networks—systems designed to detect and prevent potential leaks or misuse of sensitive information.
Following the incident, the US Department of Homeland Security initiated an official review to assess whether the use of the AI platform caused any damage to national security or exposed internal data to potential risks.
According to media reports, Gottumukkala had been granted a special exemption early in his tenure allowing him to use public artificial intelligence tools, at a time when other agency employees were prohibited from accessing such platforms.
Cybersecurity experts warn that entering internal government documents into public AI models—even if not classified—poses potential risks, as such data could be used to improve system performance or be reproduced later, increasing the likelihood of unintended information exposure.
CISA confirmed that the official’s use of the platform was “limited and short-lived,” but declined to disclose the nature of the documents uploaded or the purpose behind their use.
Gottumukkala previously served as Chief Information Officer for the state of South Dakota. His appointment had sparked questions following reports that he failed a counterintelligence-related polygraph test, although the Department of Homeland Security later clarified that such tests are not formally required as part of official evaluation procedures.
The case has reignited debate within US government institutions over the governance of public AI tools and the fine line between leveraging emerging technologies and safeguarding sensitive government data.