WASHINGTON (Diya TV) — The acting head of the U.S. government’s top cyber defense agency is under internal review after uploading sensitive but unclassified documents into a public version of ChatGPT, according to a report by Politico.
Madhu Gottumukkala, the acting director of the Cybersecurity and Infrastructure Security Agency, or CISA, uploaded internal government files during the summer of 2025 while experimenting with generative artificial intelligence. The documents carried labels marked “For Official Use Only,” which triggered automated security alerts and a formal review by the Department of Homeland Security.
DHS officials said the incident did not involve classified material, espionage, or intentional wrongdoing. They described the matter as a lapse in judgment and policy compliance, not a national security breach.
According to officials familiar with the review, Gottumukkala uploaded contracting-related documents into a publicly accessible AI platform. While the files were unclassified, they contained sensitive internal information meant to stay within government systems.
DHS oversees CISA and launched an internal investigation after security systems flagged the uploads. Officials said there is no evidence that unauthorized users accessed the information or that the data spread beyond the AI system itself. Gottumukkala reportedly had limited approval to explore AI tools at the time. That authorization did not extend to uploading internal documents to public platforms. He has cooperated with the review and has not publicly challenged the reporting.
The episode has drawn attention because it involves the leader of the agency that warns others about cyber and data risks. CISA regularly advises federal agencies, state governments, and private companies to avoid entering sensitive information into public AI systems.
Gottumukkala serves as both acting director and deputy director of CISA. He stepped into the acting role in May 2025 after several senior leaders departed. His appointment placed him at the center of U.S. cybersecurity efforts during a period of heightened concern over artificial intelligence, election security, and infrastructure protection.
CISA plays a key role in defending federal networks and critical infrastructure from cyber and physical threats. The agency also issues guidance on safe AI use, making the incident particularly sensitive.
Born in Andhra Pradesh, India, Gottumukkala has spent more than two decades working in technology and cybersecurity. He holds advanced degrees in engineering, computer science, technology management, and information systems.
Before joining CISA leadership, he served as chief information officer for the state of South Dakota. In that role, he managed statewide IT operations and cybersecurity programs. He has also held senior roles in healthcare and telecommunications, with a career focused on software engineering and systems security.
The case highlights a wider challenge facing governments as they adopt generative AI tools. A 2023 report by the Government Accountability Office found that about 70% of U.S. federal agencies lacked strong controls to prevent data leaks tied to AI use.
As AI tools become more common across government, agencies continue to struggle with clear rules on what employees can share and where. Experts say the rapid pace of AI adoption has outpaced policy development. DHS officials said the current review will focus on whether Gottumukkala followed internal guidelines. They said the process does not involve criminal liability.
Public response to the incident has been mixed. Some critics questioned leadership judgment and called for stricter AI rules within cybersecurity agencies. Others focused on the need for clearer training and enforcement across government.
Some online reactions, however, turned into xenophobic attacks that referenced Gottumukkala’s Indian origin and immigration background. Analysts and officials stressed there is no evidence linking the incident to nationality or visa status. They said the backlash reflects broader political tensions around immigration, technology leadership, and trust in public institutions.
