The Quiet Breach at CISA

Authority, AI, and the collapse of restraint at the nation’s cyber defense agency.

I am interrupting our scheduled series about the Healthcare CISO to bring you a shining example of Trust collapse in action.

The Cybersecurity Chief and the Upload Button

When trust collapses, it rarely does so with a bang. It does it with a mouse click and file select, apparently.

There are scandals that feel cinematic. And then there are scandals that feel structural. This one is the latter.

According to reporting by ARS Technica, the acting head of the Cybersecurity and Infrastructure Security Agency uploaded sensitive government material into a public instance of ChatGPT last summer. The material was marked “for official use only,” which is bureaucracy-speak for information that is not classified but is explicitly restricted from public release. At least four documents containing contracting and cybersecurity information triggered multiple automated security alerts in the first week of August alone.

This is not a story about one man making a mistake. It is a story about institutional i…