US District Court Judge Paul Engelmayer cited the risk that sensitive data could be improperly disclosed in handing down his decision, which also included an order for those barred from accessing the systems to destroy any data they had previously collected.