CISA Chief Uploaded Internal Files to ChatGPT, Sparking Security Review

• Madhu Gottumukkala, CISA's acting director, uploaded internal contracting and cybersecurity materials to ChatGPT for work purposes.
• The uploads triggered automated security alerts and an internal review, as the documents were marked "for office use only" but not classified.
• Gottumukkala, of Indian origin, obtained special permission to use ChatGPT, which is generally restricted for most employees.
• CISA spokesperson Marci McCarthy stated Gottumukkala's use was under an authorized temporary exception and limited, ending in mid-July 2025.
• Concerns exist about data entered into public ChatGPT potentially being retained and used, raising exposure risks for sensitive government information.

Why It Matters: CISA's acting director uploaded internal files to ChatGPT, prompting a security review and raising data security concerns.