GitHub says bug exposed some plaintext passwords (zdnet.com)

Nothing's really safe nowadays

Crazy level of transparency, they noticed, fixed it and notified the users even though this was an internal leak. I bet most businesses would just sweep it under the rug.