If you have API keys in your code, even private repos, now is the time to double check and change them...
We are investigating unauthorized access to GitHubās internal repositories. While we currently have no evidence of impact to customer information stored outside of GitHubās internal repositories (such as our customersā enterprises, organizations, and repositories), we are closely monitoring our infrastructure for follow-on activity.