On: Anyone can access deleted and private repository d...

[Aurornis]

> If you know the hash of some data, then you either already have the data yourself, or you learned the hash from someone who had the data.

You need to read to the end of the article where they show the brute-force way of getting the hashes.