A federal judge on Thursday censured lead counsel in the Yahoo data breach settlement for retaining thousands of dollars in attorney fees that likely should have gone to a small San Diego plaintiffs' firm.