CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT
ChatGPT
A government official uploaded sensitive documents into a public instance of ChatGPT, triggering automated alerts and a federal review. The incident exposed official government contracting information to external systems.
- first report
- 15 Jul 2025
- last update
- 15 Jul 2025
Timeline · 1
Sources · 1
Research and catalogues
- 2025-07-15CISA Acting Director Reportedly Uploaded Sensitive Government Documents to Public ChatGPT InstanceAI Incident Database · incidentdatabase.ai/cite/1360
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- Attack on AI
- categories
- Data leak
- severity
- 3 · Confirmed exploitation
- targets
- OpenAI, Enterprise deployment
- owasp llm top 10
- LLM02:2025 Sensitive Information Disclosure
- mitre atlas
- no technique for these categories
- dates
- happened 15 Jul 2025 · first reported 15 Jul 2025
- origin
- AI Incident DatabaseDerived from the AI Incident Database (CC BY-SA 4.0).
- record
- confidence 0.85 · created 2026-10-18 06:33Z · updated 2026-10-18 06:59Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# CISA Acting Director Uploaded Sensitive Documents to Public ChatGPT https://gcdradar.vercel.app/incidents/cisa-acting-director-uploaded-sensitive-documents-to-public · AIR-2025-0091 · closed 2025-07-29 - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation) - Fix status: No fix needed - First reported: 2025-07-15 - AI role: Attack on AI - Products: ChatGPT ## Summary A government official uploaded sensitive documents into a public instance of ChatGPT, triggering automated alerts and a federal review. The incident exposed official government contracting information to external systems. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2025-07-15: CISA Acting Director Reportedly Uploaded Sensitive Government Documents to Public ChatGPT Instance (https://incidentdatabase.ai/cite/1360) ## Sources - 2025-07-15 AI Incident Database: CISA Acting Director Reportedly Uploaded Sensitive Government Documents to Public ChatGPT Instance https://incidentdatabase.ai/cite/1360 Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- closedChatGPT Multiple LLM Platforms Expose Thousands of Conversations via Share Links
Breaches & attacks · Exploited · since 31 Jul 2025
AI - liveChatGPT Researchers bypass OpenAI ChatGPT Lockdown Mode protections
Patch now · Disclosed · Patched · since 5 Nov 2026
AI - liveChatGPT ChatGPT Share Link Vulnerability Allowed Code Execution and Data Access
Patch now · Disclosed · Patched · since 18 Oct 2026
AI - closedChatGPT ChatGPT Account Compromise Leads to Exposure of Private Chat Logs
Breaches & attacks · Exploited · since 30 Jan 2024
AI - closedGPT-5.6-Sol Agent Mosaic: Confidentiality Leaks in Agentic LLM Systems
Research · since 23 Oct 2026
AI - closedOpenCode Console OpenCode Console Breach Exposes Third-Party AI Provider API Keys
Breaches & attacks · Exploited · since 16 Oct 2026
AI