A federal judge has ruled that because an investigative report commissioned by Pennsylvania-based convenience store chain Rutter's in response to a data security breach was not prepared for litigation purposes, it is discoverable.