On October 21, 2026, a judge in New Mexico ordered Meta Platforms to pay the state $25 billion after a jury found the company had misled Facebook users about the privacy of their data. The case grew out of the Cambridge Analytica scandal, and the penalty is one of the largest ever imposed on a single company in US history. Meta says it will appeal, so the amount is not final yet. Here is what the ruling decided, how the number was calculated, and what happens next.
What happened in one paragraph
New Mexico Attorney General Raúl Torrez sued Meta in 2021, accusing Facebook of lying to users in the state about who had access to their personal data. The case centered on the third-party app that let Cambridge Analytica, a British political consulting firm that worked on Donald Trump’s 2016 presidential campaign, harvest personal data from as many as 87 million Facebook users without their consent. After a two-week trial, a New Mexico jury found Meta had committed 43,899,720 violations of the state’s Unfair Practices Act. Judge Francis Mathew of the First Judicial District Court in Santa Fe then entered the judgment setting the penalty at $25 billion.
How $219 billion became $25 billion
The math in the judgment is striking. New Mexico law allows a penalty of up to $5,000 for every violation of the Unfair Practices Act. Applied to the 43,899,720 violations the jury found, that ceiling works out to about $219.5 billion. The judge wrote that a penalty of more than $219 billion was warranted under state law, but he reduced the figure to $25 billion. The judgment does not explain how the $25 billion number was chosen.
For context on how far apart the two sides were: the state had argued for a penalty of $35 to $40 billion, saying it had to be large enough to hit Meta’s stock price to change the company’s behavior. Meta’s lawyers argued the penalty should be no more than $3.4 billion. The judge also ordered Meta to pay 15 percent annual interest on the penalty until it is paid in full, so the meter is already running.
What the judge found
Judge Mathew’s order pulled no punches. He wrote that the number of willful violations, the duration and repetition of the conduct, the involvement of senior leadership, the size of the New Mexico audiences reached, and the clearly intentional and systematic nature of Facebook’s repeated misstatements all supported the highest per-violation penalty the law allows.
His central line: “Facebook’s wrongdoing — over the course of years and systematically broadcast to the public — goes to the heart of Facebook’s core business practices.” The state’s case argued that Facebook knew third parties had broad access to users’ personal data, and that it misled the public about its data privacy policies, its handling of hate speech and misinformation, and its internal policies.
What Meta said: appeal is coming
Meta has said it will appeal the decision. C.J. Mahoney, Meta’s chief legal officer, said the company is confident it will win on appeal and criticized the ruling in strong terms: “This ruling, and the Attorney General’s approach to this enforcement, makes it all but impossible to do business in the state of New Mexico. At its core, this lawsuit seeks to impose a tax on speech to enforce new rules for what people can say online.”
New Mexico Attorney General Raúl Torrez struck a very different note, saying the penalty was one of the largest financial penalties against a corporation in US history and among the largest single-state verdicts against a company in American history. At a press conference, he put the scale in plain terms: “We may have paid for the construction of schools for the next 100 years.” To put that in perspective, New Mexico’s entire general fund budget is roughly $11 billion, less than half the penalty.
Why this case matters beyond New Mexico
This is not a class action. No class was certified, there is no claim form, and the $25 billion would be paid to the State of New Mexico, not to individual Facebook users. Still, the case matters nationally for several reasons:
- It dwarfs every prior privacy fine Meta has paid. The US Federal Trade Commission fined Meta $5 billion in 2019 over the same Cambridge Analytica scandal. The New Mexico judgment is five times larger, and it was the state court, not a federal regulator, that delivered it.
- It shows states can go it alone. Six other states settled their Cambridge Analytica lawsuits with Meta for a combined $459.2 million. New Mexico declined the settlement route and took the case to a jury. That outcome will be studied by attorneys general in every state weighing their own data protection enforcement strategies.
- The EU precedent is the backdrop. The judgment follows years of escalating privacy enforcement worldwide, including mandatory AI watermarking and transparency rules emerging under laws like the EU AI Act, which are pushing tech giants toward verifiable honesty about their systems.
- The appeal will shape enforcement math. If the verdict survives appeal, the per-violation arithmetic gives states a template for turning consumer-protection statutes into company-altering penalties.
What happens next
The immediate next step is Meta’s appeal, which the company has said it is confident of winning. Appeals in cases of this size typically take years, and the 15 percent annual interest keeps accumulating in the meantime. Other states that settled early will be watching the outcome closely, as will federal regulators debating whether the AI safety pacts and existing privacy frameworks have any real deterrent power. For users, nothing changes today: the penalty goes to New Mexico, and there is no payout to claim. But the case is a reminder that the data you hand to social platforms can become a liability measured in billions.
Frequently asked questions
Will Meta actually pay $25 billion?
Not yet, and maybe never in full. Meta says it will appeal, and appeals in cases this large usually take years. The amount could be reduced, overturned, or settled before a single dollar is paid. The 15 percent annual interest keeps growing until it is resolved.
Do I get any money from this as a Facebook user?
No. This is not a class action. No class was certified and there is no claim form. The penalty would be paid to the State of New Mexico, not to individual users.
What did Cambridge Analytica actually do?
Cambridge Analytica, a British political consulting firm that worked on Donald Trump’s 2016 presidential campaign, harvested personal data from as many as 87 million Facebook users through a third-party app, without those users’ consent. The revelations broke in 2018 and triggered years of litigation and regulation worldwide.
How does this compare to Meta’s earlier fines?
The $25 billion judgment is five times the $5 billion fine the US Federal Trade Commission imposed on Meta in 2019 over the same scandal. It is also roughly 55 times the combined $459.2 million that six other states accepted to settle their Cambridge Analytica cases. Large-scale data exposure cases keep getting more expensive, not less.
Why did the judge reduce $219 billion to $25 billion?
The judgment applies the $5,000 maximum per violation under New Mexico’s Unfair Practices Act to the 43,899,720 violations the jury found, which comes to about $219.5 billion, and then reduces the award to $25 billion. The judge did not explain in the judgment how the reduced figure was chosen.