US cyber defense chief accidentally uploaded secret government info to ChatGPT

In a troubling incident, the acting head of the Cybersecurity and Infrastructure Security Agency (CISA), Madhu Gottumukkala, mistakenly uploaded sensitive government documents to a public version of ChatGPT last summer, according to reports from Politico. Four officials from the Department of Homeland Security (DHS) familiar with the situation revealed that this incident triggered several internal cybersecurity alerts aimed at preventing unauthorized disclosure of government materials. The incident occurred shortly after Gottumukkala's appointment, during which he sought special permission to access OpenAI's widely used chatbot—access that is typically restricted for most DHS personnel. Instead, DHS employees are expected to utilize approved AI tools, such as DHSChat, which are specifically designed to keep sensitive queries and documents within federal networks. The reasons behind Gottumukkala's need to use ChatGPT remain unclear. One insider suggested that it appeared he pressured CISA into granting him access, which he then misused. While the leaked information was not classified, it was marked as "for official use only," a designation indicating unclassified sensitive material that, if improperly shared, could negatively impact individuals' privacy or compromise critical federal operations. This incident has sparked significant concern regarding the potential misuse of the sensitive data by ChatGPT's vast user base, which numbers around 700 million. Experts have cautioned that using public AI platforms carries substantial risks, as uploaded information can be stored, breached, or inadvertently influence responses to other users. In light of the breach, DHS has launched an investigation to assess the potential security implications, which could lead to administrative or disciplinary actions against Gottumukkala. These repercussions might range from a formal reprimand or mandatory retraining to more severe penalties, such as suspension or even revocation of security clearance.