What happened with GitHub, Heroku, and raided private repos?

GitHub says it has identified and alerted developers who have had their private repositories accessed and downloaded via stolen authentication tokens from Heroku and Travis CI.