Dear Apperta
I can confirm that the mirrors taken of the public repos have been encrypted and stored offline. I will destroy these after 90 days and send you a destruction notice.
Please advise me of your assessment of the data breach, if you intend to notify affected individuals / organisations, and if you plan to notify the ICO.
/rob