PayPal Inc. has won a partial victory in its effort to keep sensitive business records from the "Anonymous" defendants accused of hacking its servers. But a judge rejected the company’s bid to keep the material under a strict protective order, saying that was a civil-side move.

Attorneys for the group charged in the 2010 cyberattack on eBay Inc.’s PayPal subsidiary were hoping to subpoena a wide swath of information from the payments company relating to the attack. PayPal’s lawyers at Cooley were attempting to quash the entire request. If it was forced to comply, it was seeking to keep the materials designated as "for attorneys eyes only." In blocking the protective order, U.S. Magistrate Judge Paul Grewal suggested in his Thursday ruling that in a civil case the company may have had its way, but the burden of proof is higher in a criminal case.