Who is Madhu Gottumukkala? Indian-origin top US cyber official facing scrutiny over public ChatGPT uploads

Acting CISA Director Madhu Gottumukkala uploaded sensitive contracting files to public ChatGPT, triggering DHS alerts and an internal security review.

• CISA's acting director leaked sensitive files on ChatGPT, causing alerts.
• DHS launched an internal review to assess any security compromise
• Incident raises concerns about AI and sensitive government data handling.

Did our AI summary help?

The interim head of the US Cybersecurity and Infrastructure Security Agency uploaded sensitive contracting documents to the public version of ChatGPT last summer, triggering automated security alerts and an internal review at the Department of Homeland Security, Politico reported, citing four DHS officials familiar with the matter.

The incident involved Acting CISA Director Madhu Gottumukkala and raised fresh concerns inside the agency responsible for safeguarding US government networks, even as Washington pushes to expand the use of artificial intelligence across federal departments.

Sensitive but unclassified material flagged

According to Politico, Gottumukkala sought special approval from the agency’s Office of the Chief Information Officer to use ChatGPT shortly after joining CISA in May, when access to the tool remained blocked for most DHS employees.

Officials said the uploaded material was not classified but included contracting files marked “for official use only”, a designation for sensitive government information not intended for public release.

Cybersecurity monitoring systems detected the uploads in August, with multiple alerts triggered during the first week alone, Politico reported.

Who is Madhu Gottumukkala?

Madhu Gottumukkala is the Acting Director and Deputy Director of the US Cybersecurity and Infrastructure Security Agency (CISA), the federal body responsible for protecting America’s critical cyber and physical infrastructure.

He has led the agency in an interim capacity since May, after being appointed by Department of Homeland Security (DHS) Secretary Kristi Noem. With the Senate confirmation of President Donald Trump’s nominee for the permanent CISA role stalled, Gottumukkala is currently the most senior political official running the agency.

A career technocrat, Gottumukkala brings more than two decades of experience in information technology across government and the private sector. Before joining CISA, he served as Commissioner and Chief Information Officer for South Dakota’s Bureau of Information and Technology, overseeing statewide IT systems and cybersecurity operations. Earlier, he was also South Dakota’s Chief Technology Officer, only the second person to hold that role in the state.

Born on October 29, 1976, Gottumukkala studied engineering in India before moving to the United States. He holds a Bachelor of Engineering in Electronics and Communication Engineering from Andhra University, a Master’s degree in Computer Science from the University of Texas at Arlington, an MBA in Engineering and Technology Management from the University of Dallas, and a PhD in Information Systems from Dakota State University. He also serves on the advisory committee of Dakota State University’s College of Business and Information Systems.

DHS launches internal review

Following the alerts, senior DHS leadership initiated an internal review to assess whether the disclosures had compromised government security. The outcome of that review remains unclear, according to Politico.

After the activity was flagged, Gottumukkala met with senior DHS leaders to examine what had been uploaded. Politico reported that then-acting DHS General Counsel Joseph Mazzara and DHS Chief Information Officer Antoine McCord were involved in evaluating potential risks.

Gottumukkala also held meetings in August with CISA CIO Robert Costello and chief counsel Spencer Fisher on the handling of sensitive material.

Agency response and policy stance

In a statement emailed to Politico, CISA Director of Public Affairs Marci McCarthy said Gottumukkala “was granted permission to use ChatGPT with DHS controls in place”, describing the use as “short-term and limited”.

She added that Gottumukkala last used ChatGPT in mid-July 2025 under an authorised temporary exception, and said CISA’s default policy remains to block access to ChatGPT unless an exception is granted.

McCarthy said the agency remains committed to using AI to modernise government operations in line with President Donald Trump’s executive order aimed at boosting US leadership in artificial intelligence.

Why public ChatGPT raised alarms

Politico noted that information entered into the public version of ChatGPT is shared with OpenAI and may be used to improve responses for other users. By contrast, AI tools approved for DHS staff, including the internal chatbot DHSChat, are designed to prevent data from leaving federal systems.

One official told Politico that Gottumukkala “forced CISA’s hand into making them give him ChatGPT, and then he abused it.”

Federal employees receive mandatory training on handling sensitive material, and DHS policy requires investigations into the “cause and effect” of any exposure of official-use documents, including whether disciplinary action is warranted. Potential measures range from retraining to suspension or revocation of security clearance.

Leadership under scrutiny

Gottumukkala, the most senior political official at CISA, has served in an acting role since May following his appointment by DHS Secretary Kristi Noem. Politico reported that President Trump’s nominee to permanently lead the agency, Sean Plankey, remains stalled after his confirmation was blocked last year.

The report said Gottumukkala’s tenure has also been marked by controversy. Earlier this summer, at least six career employees were placed on leave after he requested an “unsanctioned” counterintelligence polygraph. During Congressional testimony last week, Gottumukkala said he did not “accept the premise of that characterization”.

Separately, Politico reported that Gottumukkala attempted to remove CISA CIO Robert Costello from his post last week, a move that was halted after intervention by other political appointees.

The ChatGPT episode adds to mounting internal scrutiny at an agency tasked with defending US cyber and infrastructure security, at a time when federal use of artificial intelligence is expanding faster than the rules designed to govern it.