Consultant’s report not entitled to work product protection 

Where a security consultant had a preexisting relationship with Capital One and its report was pursuant to a prior statement of work and master services agreement, its retention by outside legal counsel after a security intrusion did not provide work product protection. The consultant’s data breach report likely would have been performed in substantially the ...