Yes, GitHub's Copilot Can Leak (Real) Secrets (blog.gitguardian.com)

Copilot is just synthesis of man-made code. If a lot of code is written with bad security practices, Copilot will replicate those practices.