A good rule of thumb is if you're worried about code being copied you really shouldn't put it on github. Even if most large companies respect copyright, that small studio in Russia certainly won't.
From other comments, this developers "private" code was found in 30k+ public repositories with public attribution which is what created this issue.
Presumably your private code is not also present or leaked to any public repositories.