Asking for every IP address that accessed a public gist seems like a bit of an overreach to me. Github should also have the responsibility to protect its lawful

Asking for every IP address that accessed a public gist seems like a bit of an overreach to me. Github should also have the responsibility to protect its lawful users' data. It seems reasonable though to request some user data for a specific IP address that Uber suspects as being the invader (depending on how strong the evidence is).