> However, it did allow access to a system containing a backup of database tables, including this user data. Sounds like they store backups with git and push t

> However, it did allow access to a system containing a backup of database tables, including this user data. Sounds like they store backups with git and push them to GitHub (presumably Git LFS). Someone should tell them that Git is not a backup solution. It's also possible they were using some backup service that uses GitHub SSO (not sure if that's better or worse). It's good to see they finally took advantage of GitHub's feature that restricts user access to an organisation if they don't have 2FA. Every organisation should enforce that.