There certainly is a mechanism [0], however it doesn't actually completely remove the commit from the remote GitHub repo, as people with the direct link can still access it. I'll check to see if I can find removed commits using this.

[0] https://help.github.com/articles/remove-sensitive-data