On: Git ransom campaign incident report

[ralph84]

I assume they're trying to contact the repo owners to see how they want to proceed. Even if the change seems obvious, changing the contents of a repo is definitely a case where the git host should involve the owner of the repo (barring ToS violations).

[jredmond → ralph84]

This is the safer bet. The host should offer to restore from their own backups, but some customers may have already taken care of their own stuff.