Judge Orders Meta to Pay $25 Billion in New Mexico Privacy Case as Cambridge Analytica Questions Linger

Introduction

A judge in New Mexico has ordered Meta, the parent company of Facebook, to pay 25 billion dollars in civil penalties after finding that the company misled users about how their personal information was handled. The order, issued on 21 October 2026 by First Judicial District Judge Francis Mathew, is reported to be one of the largest data-privacy penalties ever imposed in the United States, and it arrives nearly a decade after the Cambridge Analytica affair first exposed how Facebook data could be harvested and used for political targeting. Meta has said it disputes the ruling and plans to appeal, so the figure may yet change before any money is paid. What the judgment already settles, however, is that a single state, willing to take the company to trial rather than join a wider settlement, could secure a penalty far larger than anything regulators had obtained before. This is the story of the Meta $25 billion New Mexico privacy fine Facebook Cambridge Analytica case, and of the questions it still leaves open.

1. What the judge ordered

The order at the centre of this story is a civil penalty, not a criminal sentence. Judge Mathew directed Meta to pay 25 billion dollars to the state of New Mexico after a jury found that Facebook had made false or misleading statements to consumers about its data-privacy practices. The sum is striking on its own, but it becomes more remarkable when set against what the law would have allowed. Under New Mexico law, each wilful violation of the state’s Unfair Practices Act can attract a penalty of up to 5,000 dollars, and the jury’s findings pointed to about 43.9 million violations. Applied at the maximum, that arithmetic would have supported an award above 219 billion dollars. The judge chose a far smaller number, while still producing a penalty that dwarfs every earlier privacy fine in American history.

1.1 The 25 billion dollar figure

The scale of the figure reflects both the number of violations and the length of time over which the misleading statements were made. Court reporting on the order describes Facebook’s statements about privacy as having continued for years and having been communicated systematically to the public, rather than appearing as a single error or an isolated claim. The judge’s decision to set the penalty at 25 billion dollars, well below the theoretical maximum, suggests a deliberate calibration: large enough to register as a serious sanction against one of the world’s most valuable companies, yet not so large as to rest on the outer edge of what the statute permits. Whether that calibration survives on appeal is now one of the central questions in the case, and it is the question that market watchers and other state attorneys general are following most closely.

1.2 The 15 percent interest

Alongside the headline figure, the order carries a financial consequence that grows with time. Post-judgment interest of 15 percent a year will apply until the penalty is paid, according to reporting on the order. That rate means delay is expensive for Meta: every year the case spends in the appeals process adds a substantial sum to the eventual bill if the judgment stands. It also means the state has a reason to defend the award vigorously, since the interest provision protects the value of the judgment while the appeal runs its course. For a company of Meta’s size the interest alone would amount to billions of dollars over a multi-year appeal, which is one reason the case is being watched as a test of how far state consumer-protection law can reach into the business of a global platform.

2. How the case reached the courtroom

The judgment did not emerge from a single hearing. It was the end of a long process that began with an investigation by the New Mexico attorney general’s office and moved through a trial in Santa Fe, where a jury was asked to weigh dozens of individual statements made by Meta and its leadership. The trial put the company’s public promises about privacy under a microscope, and the verdict that followed set the stage for the judge to fix the penalty. Understanding the sequence matters, because the size of the award follows directly from what the jury found and how the state’s consumer-protection statute counts each violation.

2.1 The September jury verdict

On 25 September 2026, a jury in Santa Fe found that 26 of 29 statements made by Meta and its leadership about data access, hate speech and misinformation were misleading. The statements covered the ground that users care about most: who could see their information, what control they had over it, and whether the company sold or shared personal data with advertisers. The jury’s conclusion was that Facebook had told consumers they controlled how their information was shared, and had claimed it did not sell or share personal information with advertisers, when the reality was different. That finding, reported widely after the verdict, is the foundation of the penalty: it is the jury’s assessment that the company deceived its users, not merely that its systems failed.

2.2 The 43.9 million violations

The figure that turned a finding of deception into a record penalty is the count of violations. The jury’s verdict produced roughly 43.9 million violations of New Mexico’s Unfair Practices Act, a number that reflects the way the statute treats misleading statements made to large numbers of people. Each misleading statement, repeated to users across the state over a long period, can count as a separate violation, and the total climbs quickly when the audience is measured in millions. It is this counting method, rather than any single dramatic disclosure, that explains how a case about statements could support a penalty in the tens of billions. The method is also likely to be a focus of the appeal, since Meta can be expected to argue that the multiplication of violations overstates the harm and produces a disproportionate result.

3. The Cambridge Analytica connection

No account of this case is complete without the scandal that gave rise to it. The New Mexico litigation grew out of the Cambridge Analytica affair, which came to light in 2018 and revealed that a personality quiz on Facebook had harvested information from about 87 million profiles. That data was then used to build psychographic profiles aimed at targeting voters in the run-up to the 2016 presidential election in the United States. The firm at the centre of the affair worked for the Trump campaign, and the revelation that personal data could be turned into a political weapon changed the public debate about social media permanently.

3.1 The 87 million profiles

The number at the heart of the scandal is 87 million: the approximate count of Facebook profiles whose information was collected through a third-party personality quiz. Users who took the quiz, and their friends, had their data gathered without their permission, and the material was then used to create detailed profiles of their political leanings and personality traits. The profiles were intended to make political advertising more precise, targeting voters with messages matched to their fears and preferences. When the practice was exposed, it showed that data given to a social network for one purpose could be diverted to another entirely, and that the company’s controls over third-party apps were far weaker than its public statements suggested.

3.2 What the case did and did not decide

Here the New Mexico case carries an important distinction. The penalty was imposed for statements Facebook made that deceived users about data privacy and its response to Cambridge Analytica, not for the harm caused by how the harvested data was used. That distinction has been underlined in analysis published in early November, including a piece by University of Notre Dame scholar Emma L. Briant, which argues that the litigation punished the deception while leaving the consequences of the political exploitation of the data largely unexamined. The judge found that Facebook knew its own processes for checking whether apps misused personal data were inadequate, that it could not enforce deletion of the data, and that it failed to notify users about thousands of applications associated with data misuse. What the case did not do was put a price on the use of the data itself, and that gap is why some critics describe the judgment as a measure of the cover-up rather than of the alleged crime.

4. Why New Mexico went its own way

The path New Mexico chose was unusual. In August 2026, on the eve of a child-safety trial in federal court in Oakland, California, Meta settled with a bipartisan coalition of state attorneys general for roughly 17 billion dollars. Most states took the settlement. New Mexico did not. It opted out, continued its own litigation, and proved that a state willing to go to trial against Meta could win a far larger award than the negotiated deal offered. That choice, and the result it produced, is now being studied by officials and lawyers in other states.

4.1 The multistate settlement

The August 2026 agreement was a broad deal. It settled claims held by the participating states, including an allocation of 459.3 million dollars for Cambridge Analytica-related claims, and it released Meta from claims known and unknown relating to the scandal. The participating attorneys general agreed to release the company from any claims, even ones they did not yet know existed. For Meta, the attraction was finality: a single payment that closed off a whole category of litigation. For the states that signed, the attraction was certainty and speed, avoiding the cost and risk of a trial. The settlement’s scale, about 17 billion dollars, was itself enormous, yet the New Mexico judgment that followed two months later exceeded it, which is why the decision to stay out of the deal now looks so consequential.

4.2 Attorney General Raul Torrez’s case

The New Mexico case was brought by Attorney General Raul Torrez, who has presented the judgment as the start of a longer effort rather than its end, saying in reported remarks that his office is just getting started. His team’s decision to press on alone carried real risk: a loss at trial would have left the state with nothing, while the settlement offered a guaranteed share. The gamble paid off in the courtroom, and the result has given Torrez a prominent place in the national conversation about holding technology companies to account. Whether other states now follow his example, pursuing their own trials instead of joining collective settlements, is one of the wider effects of the judgment, and it is a prospect that technology companies and their lawyers will be watching with concern.

5. What 25 billion dollars means for Meta

For most companies, a 25 billion dollar penalty would be an existential event. For Meta, it is a serious blow that the business can absorb, at least in the short term. The company is one of the most profitable in the world, and its cash reserves and earnings give it room to carry a liability of this size while it appeals. That does not make the judgment unimportant. It sets a new ceiling for privacy penalties in the United States, it creates a precedent that other states can cite, and it arrives at a moment when Meta is spending heavily on artificial intelligence and facing questions about the future of its business.

5.1 Bigger than the 2019 FTC fine

The comparison that puts the New Mexico judgment in perspective is the penalty imposed by the Federal Trade Commission in 2019. That fine, five billion dollars, was then the largest privacy penalty ever imposed on a technology company, and it was widely described as a landmark. The New Mexico award is five times larger. The gap between the two figures tells a story about how enforcement has changed: where a federal regulator once negotiated a settlement, a state court has now imposed a penalty after a trial, and the result is far larger. It also tells a story about the limits of negotiated settlements, which tend to reflect what a company is willing to pay to make a problem go away, rather than what a statute would allow a court to impose after a finding of wrongdoing.

5.2 The market’s muted reaction

Perhaps the most surprising element of the story is how little the judgment appears to have shaken investors. After the order was issued, Meta’s shares traded about two percent higher, according to market commentary published in the days that followed. The rise suggests that investors had expected a large penalty, that they believe the figure will be reduced on appeal, or that they regard even 25 billion dollars as a manageable cost for a company of Meta’s scale. It is a reaction that has troubled critics, who argue that a fine which leaves a share price unmoved is functioning as a toll rather than a deterrent. Whether that reading is fair will depend on what happens next: if the judgment is upheld in full, the market’s calm may look misplaced, but if it is cut sharply on appeal, the investors who shrugged will have been proved right.

6. The appeal ahead

Meta has made its position clear. The company disputes the ruling and has said it will appeal, and as of early November no appellate court had ruled on the case, stayed the judgment, or signalled how it might decide. The appeal is where the New Mexico judgment will be tested, and the process is likely to take years. Appeals in cases of this size move slowly, the sums at stake attract the most experienced lawyers on both sides, and the legal questions are genuinely contested: the counting of violations, the size of the penalty, and the scope of the state’s consumer-protection law are all open to argument.

6.1 Meta’s stated plan

Meta’s public position is that the judgment is wrong and should not stand. The company has not accepted the jury’s findings or the judge’s calculation, and it has signalled that it will challenge the award through the appellate courts. That challenge is likely to focus on the multiplication of violations and on whether a penalty of this size is proportionate to the conduct found. The company can also be expected to argue that its statements, read in context, were not misleading in the way the jury concluded. For its part, New Mexico has said it will defend the judgment, and the attorney general’s office has shown no sign of seeking a negotiated reduction. The two sides are therefore set for a long contest, with the 15 percent interest clock running throughout.

6.2 What an appeal could change

The range of outcomes on appeal is wide. The judgment could be affirmed in full, leaving the 25 billion dollar figure plus interest intact. It could be reduced, which is the outcome that prediction-market traders have been pricing as the more likely one: a Kalshi contract asking whether the penalty will be cut on appeal was trading at about a 71 percent implied probability of yes in early November. Or it could be reversed, sending the case back for a new trial or ending it altogether. Each outcome carries different consequences. Affirmance would confirm that state consumer-protection law can produce penalties of this scale. A substantial reduction would still leave a record fine, but a smaller one. Reversal would hand Meta a major victory and discourage other states from trying the same route. Until an appellate court speaks, all three remain possible, and that uncertainty is part of why the case continues to command attention.

7. What the money would fund

One question that follows any large penalty is where the money goes, and in this case the answer is different from what many readers might expect. The 25 billion dollars would not be divided among Facebook users, and it would not be paid out as compensation to the people whose data was harvested. Instead, under New Mexico’s constitution, fines imposed for consumer-protection violations go toward education spending. That destination shapes how the judgment should be understood: it is a penalty paid to the state for breaking the state’s law, not a fund for the victims of the conduct.

7.1 Education spending

Reporting on the judgment, including by the Associated Press, has noted that the fines would be directed to education under the New Mexico constitution. For a state where public education is chronically underfunded, a sum of this size, if it is ever collected in full, would be transformative. Schools, teachers and students across the state would feel the effect of money on a scale that the state’s budget rarely sees. That prospect gives the case a local dimension that goes beyond the national debate about technology regulation: for New Mexicans, the judgment is also about whether their state can capture a share of the wealth generated by a company that profited from their data. It is, however, a prospect that depends entirely on the appeal. Until the judgment is final, the money is a figure on paper rather than cash in a school budget.

7.2 No direct payments to users

The other side of the funding question is what the judgment does not do. It does not create a compensation fund for affected Facebook users, and people whose data was harvested will not receive payments from this award. That absence is part of the criticism levelled at the case by those who argue it punishes deception without addressing harm: the users whose information was taken are not the ones who benefit financially, even though their data is at the centre of the story. The distinction matters for how the public judges the outcome. A penalty that funds schools is a public good, but it is not restitution, and the people who were misled may reasonably ask what the judgment does for them. The answer, for now, is that it establishes a principle and a precedent, rather than a payment.

8. What remains unconfirmed and what to watch next

As with any case that is heading to appeal, much about the New Mexico judgment is still unsettled. The figure is known, the reasoning behind it has been reported, and the parties’ positions are clear. But the final amount, the timetable for payment, and the wider consequences are all unresolved. The story will continue to develop over months and years, and the developments that matter most are the ones that will determine whether the judgment stands, shrinks or falls.

8.1 The open questions

Several questions remain open. The judge reserved the question of injunctive relief, meaning the court has not yet decided whether to order Meta to change its practices as well as pay a penalty. The final amount is unknown until the appeal is decided, and the timetable for any payment is unknown as well. It is also unclear whether the judgment will encourage other states to bring their own cases, or whether the August settlement’s broad release will limit what other states can do. The effect on Meta’s own behaviour is equally uncertain: the company has given no public sign that the judgment has changed its approach to privacy disclosures, and any change is likely to wait for the appeal. All of these questions are live, and none of them has an answer yet.

8.2 What to watch next

The next steps to watch are straightforward. The first is the filing of Meta’s appeal and the schedule the appellate court sets for briefing and argument. The second is any decision on injunctive relief, which could matter more in practice than the money, since an order to change practices would affect how Facebook operates. The third is the reaction of other states, some of which may see New Mexico’s result as a reason to pursue their own trials. The fourth is the debate in Washington about federal privacy legislation, which the case has revived: critics of the current system argue that relying on state consumer-protection law produces uneven results, and they point to this case as evidence that a national standard is overdue. And the fifth is the market’s judgment, which will be tested again each time the appeal produces news. The coming weeks and months will provide the answers, and each of them will shape how this record penalty is remembered.

The New Mexico judgment is a landmark, but it is a landmark whose meaning is still being written. It shows that a state can take a technology giant to trial and win a penalty far larger than any negotiated settlement, and it shows that the law can reach conduct that happened years ago and affected millions of people. It also shows the limits of that approach: the penalty punishes misleading statements rather than the use of the data itself, the money goes to the state rather than to the users, and the final figure is hostage to an appeal that could take years. Those tensions are why the case will be argued over long after the headlines fade. The coming weeks will provide the answers.

Comments

comments