Yahoo Inc. can’t escape claims that it should pay punitive damages over data breaches that left information on 3 billion customers in hackers’ hands.