CISA's acting director, Madhu Gottumukkala, uploaded sensitive contracting documents marked for official use only to ChatGPT, TechCrunch reported on January 28th, citing Politico. The uploads reportedly triggered automated security warnings designed to prevent theft or accidental disclosure from federal networks. Gottumukkala had been granted an exception to use ChatGPT while other employees were prohibited, and Homeland Security officials examined whether the uploads harmed government security.

The leaking exception turns AI policy into a hierarchy of permissions. A public agency can forbid a tool to ordinary staff, warn against data leaving the network, and still allow the person at the top to carry internal files into a commercial model. The danger is not dramatic espionage. It is administrative confidence meeting a product built to absorb language. A contract document marked for internal use becomes prompt material, and the security system records the contradiction after the gesture has already occurred. The episode also weakens the theater of institutional caution. Rules look different when leaders treat them as temporary obstacles, and the chatbot becomes the place where that difference leaves a log.