WASHINGTON, D.C. — In a development that critics are calling a “security nightmare,” Madhu Gottumukkala, the Indian-origin acting director of the Cybersecurity and Infrastructure Security Agency (CISA), is facing an internal Department of Homeland Security (DHS) inquiry. Reports surfaced on Wednesday, January 28, 2026, that Gottumukkala uploaded sensitive government contracting documents into a public version of ChatGPT last year, bypassing standard security protocols.
The incident is the latest in a string of controversies dogging the Trump-appointed cyber chief, whose tenure has been marked by staffing purges and failed security screenings.
1. The ChatGPT Breach: “For Official Use Only”
Shortly after taking office in May 2025, Gottumukkala requested—and received—special permission to use ChatGPT, a tool currently blocked for most other DHS employees.
- The Incident: In August 2025, CISA’s automated sensors flagged multiple attempts to upload sensitive data to OpenAI’s servers.
- The Content: While the files were not “Classified,” they were marked “For Official Use Only” (FOUO), containing sensitive contracting details and internal agency data.
- The Risk: Data uploaded to the public version of ChatGPT is shared with OpenAI and can be used to train its models, potentially exposing the information to other users or foreign intelligence services.
2. A “Nightmare” Tenure: Polygraphs and Purges
The data leak comes as Gottumukkala is already embattled over his leadership style and personal security standing.
- The Failed Polygraph: Earlier this summer, Gottumukkala reportedly failed a counterintelligence polygraph exam—a test he himself had pushed to implement for career staff. While he denies the “characterization” of the failure, the incident led to at least six career staff members being placed on leave.
- The CIO Ouster Attempt: Just last week, Gottumukkala attempted to remove CISA’s Chief Information Officer, Robert Costello, through a “management-directed reassignment.” The move was blocked by other political appointees after career staff “raised hell,” viewing Costello as the agency’s top remaining technical talent.
- Workforce Exodus: Internal memos suggest that nearly 1,000 employees (roughly one-third of the agency) have left CISA in the last year due to political friction and workforce cuts.
3. Who is Madhu Gottumukkala?
An engineer by training, Gottumukkala rose through the ranks of South Dakota’s IT infrastructure before being tapped for federal service.
| Background Detail | Information |
| Education | PhD in Information Systems (Dakota State); MBA (Univ. of Dallas). |
| Former Role | CIO & Commissioner for South Dakota (under Kristi Noem). |
| Current Status | Acting Director & Deputy Director of CISA (since May 2025). |
| Political Link | Viewed as a staunch Trump loyalist; appointment was made by DHS Secretary Kristi Noem. |
4. Official Response: Modernization or Malpractice?
CISA’s Director of Public Affairs, Marci McCarthy, defended the use of AI as part of a mandate to “remove barriers to America’s leadership in AI.” She clarified that Gottumukkala’s access was “short-term and limited” and authorized under a temporary exception.
However, one anonymous DHS official told Politico: “Gottumukkala forced CISA’s hand into making them give him ChatGPT, and then he abused it.”