SAN FRANCISCO — U.S. District Judge Lucy Koh’s first major ruling in data-breach lawsuits against major health insurer Anthem Inc. didn’t do much to clarify how the litigation itself will ultimately play out.

The 82-page order handed down Sunday dismissed some state law claims, upheld others and gives plaintiffs a chance to try again.