U.S. Magistrate Judge John Anderson ruled that Capital One must hand over the report, prepared by Mandiant, to lawyers suing the company on behalf of customers.
The ruling could set a precedent for plaintiffs to have more evidence at their disposal in future cybersecurity class actions.