Westlaw has a summary, which can be found by searching for the case name "Volkswagen AG v Garcia".  The cause of action was breach of confidence.  The relevant point seems to have been that the researchers did not reverse engineer the software, but obtained it from the internet

 in circumstances which suggested that it had not come from a legitimate source.  This seems to have been taken to mean that it was imparted in circumstances that imported an obligation of confidence, which the publication of the paper would breach.  The risk of theft was a factor justifying the grant of an interim injunction.

The researchers also argued that the publication of the program on the internet meant that it had lost its confidentiality.  Unfortunately, the summary does not tell us why the court rejected this argument, which would on its face seem to be rather strong.

Arvind

<snip>