FWIW, the headline is click bait spam intended to drive traffic to the “have i been pwned” website.

No user profile data was “leaked”. Somebody scraped public GitHub profiles and put the data in MongoDB.

There’s nothing in there that wasn’t already public on GitHub.