@iwm911 discovered that GitHub was hosting a continuous integration service used for product demonstrations. This service allowed unrestricted access via open user registrations. While out of scope and without access to our production infrastructure, we responded quickly to this issue and shutdown the offending service.