So turns out if you rename a directory previously encrypted by #gitcrypt, the git-crypt config obiously doesn't change on its own...
Long story short: A bunch of, thankfully, non-mission critical passwords and the certs where accessible publicly for about day in my #dotfiles repository
They were accessed by the random IP from Singapore I talked about before. Let's hope I don't get fired 😬