X Must Face Suit Over Data Breach, Judge Rules