the screenshot of the github file can be access here: https://www.secrss.com/articles/4851
and yes, that "programmer" pushed such highly sensitive company information to his personal github repo.
That's the kind of combination an idiot would have on his luggage!
What is missing is a way to programmatically, and secretly, inform people of their mistakes. I've personally found literally hundreds of examples of this and lack the manpower to file that many tickets....
No, I said "careless" rather than "incompetent".
Lot's of things could go wrong and cause that, I don't comment on the detail until the reason of why the password end up been pushed to GitHub is explained.
Also, I suggest Please REMOVE anything that MAY help to locate the stolen information, including content of the advertising post (Can be keyword searched).