ANYONE CAN ACCESS DELETED AND PRIVATE REPOSITORY DATA ON GITHUB

Summary from the TLDR InfoSec newsletter

GitHub's repository design allows access to data from deleted and private repositories indefinitely, creating a significant security vulnerability known as Cross Fork Object Reference (CFOR).