Expect GitHub to be dropped from the case pretty quickly, I presume. They have a Safe Harbor exemption from responsibility for content posted by users on their

Expect GitHub to be dropped from the case pretty quickly, I presume. They have a Safe Harbor exemption from responsibility for content posted by users on their site. The complaint doesn't even allege that anyone ever warned GitHub about the presence of the data whatsoever. They just baselessly assert that GitHub "should have known" without providing any support. Section 230 of the Communications Decency Act provides the Safe Harbor protection to platforms as long as they do not do things which amount to them having editorial control (things like holding posts for moderation before posting can do this and lose their safe harbor, as happened to LiveJournal years ago, but taking posts down afterwards and responding to flagged content does not).