Trump-Appointed CISA Head Faces Scrutiny Over ChatGPT Use

Madhu Gottumukkala uploaded sensitive documents to public AI chatbot, triggering security alerts

Jan. 29, 2026 at 6:55am

Madhu Gottumukkala, the acting director of the US Cybersecurity and Infrastructure Security Agency (CISA), has come under fire for reportedly uploading sensitive government contracting documents to the public version of ChatGPT. The move, which was reportedly done with special permission from CISA's IT office, triggered multiple security alerts and raised concerns about the protection of sensitive information under Gottumukkala's leadership.

Why it matters

CISA is the federal agency responsible for protecting the nation's critical infrastructure from cyber threats, making Gottumukkala's use of ChatGPT for government work a significant breach of protocol. The incident has sparked questions about security practices and AI oversight within the agency.

The details

According to reports, Gottumukkala, a Trump-appointed official, sought and received special permission from CISA to use ChatGPT after joining the agency in May 2025. However, the uploads of 'for official use only' documents to the public AI chatbot triggered the agency's cybersecurity sensors multiple times in August, prompting an internal review. While the files were not classified, the disclosures raised concerns about potential risks to government security.

  • Gottumukkala joined CISA as acting director in May 2025.
  • He reportedly used ChatGPT with CISA's permission in mid-July 2025.
  • The security alerts were triggered in August 2025.

The players

Madhu Gottumukkala

The acting director of the US Cybersecurity and Infrastructure Security Agency (CISA), appointed by former President Donald Trump.

CISA

The US Cybersecurity and Infrastructure Security Agency, the federal agency responsible for protecting the nation's critical infrastructure from cyber threats.

Kristi Noem

The current Secretary of the Department of Homeland Security, who appointed Gottumukkala as CISA's deputy director.

Got photos? Submit your photos here. ›

What’s next

The Department of Homeland Security is conducting an internal review to assess whether Gottumukkala's use of ChatGPT posed any risk to government security.

The takeaway

This incident highlights the need for stricter oversight and security protocols around the use of AI tools, even within government agencies tasked with protecting national cybersecurity. It raises questions about the judgment and decision-making of senior officials entrusted with safeguarding sensitive information.