CISA’s ChatGPT Incident Exposes a Bigger AI Governance Problem

Between mid-July and early August 2025, acting CISA Director Madhu Gottumukkala reportedly uploaded at least four sensitive government documents, including contracting material marked for official use only, to the public version of ChatGPT; DHS cybersecurity systems flagged the activity and CISA said the use was permitted and limited. The piece frames the episode as evidence of an accountability gap in enterprise AI governance and recommends that every AI agent with access to sensitive data be assigned a named owner who can be held responsible for its actions.