If these attackers had tried targeted brute-force on some limited accounts, they might have been successful without tripping over the GitHub security team. None

If these attackers had tried targeted brute-force on some limited accounts, they might have been successful without tripping over the GitHub security team. Nonetheless, kudos to GitHub for handling this perfectly.