[hdougie]

Same here, been getting lots of emails regarding issues I've supposedly followed for the past few hours. It's got me worried a bit as security audit log shows nothing. Something stinks so think I'll change my password to be safe.

[abdullahi1]

Same with me as well, nothing in the security log. Something is definitely wrong here, how could I get subscribed to issues on a project I've never heard of. Was my account compromised? I've even had 2 Factor Authentication enabled since July 2017.

[ribosometronome]

I received a notification today from Github indicating my account was compromised and reached out on why it did not display in my security status. They indicated that the account was accessed via API and that I should enable two factor.

Why raises the question -- how were YOU compromised with 2 factor on?