Heroku fesses up to customer password theft due to OAuth token attack

Hashed and salted passwords of customers were exfiltrated thanks to a stolen GitHub integration OAuth token.