A New Mexico judge ordered Meta Platforms, Inc. to pay $25 billion on October 21, 2026, ruling that the company deceived Facebook users about how their personal data was shared and sold. The judgment, issued by Judge Francis J. Mathew in State District Court in Santa Fe, caps a five-year legal fight that New Mexico opened in 2021 over Facebook’s data-sharing practices tied to the Cambridge Analytica scandal.
A jury found on September 25, 2026 that Meta had committed more than 43 million violations of New Mexico’s consumer-protection statutes, according to CNBC. Under that law, each violation can carry a civil penalty of up to $5,000, a formula that would have produced a staggering total. Judge Mathew calculated that the maximum statutory penalty exceeded $219 billion before reducing the final judgment to $25 billion, payable directly to the state.
The case is one of the largest state-level privacy judgments ever entered against a single technology company, and it lands at a moment when Meta is simultaneously racing to expand its AI products. The size of the number alone, $25 billion, is large enough to rank among the biggest corporate penalties in American history tied to consumer data practices, eclipsing Meta’s own $5 billion settlement with the Federal Trade Commission in 2019.
Don't miss new tech stories on Google
Add Tech Insider once in the Google app and our stories appear in your news suggestions.
What New Mexico’s Jury and Judge Decided
New Mexico’s attorney general sued Meta in 2021, arguing that Facebook misled consumers about data privacy and the company’s broader platform policies. The case proceeded without a federal co-plaintiff, with the state pursuing the claims largely on its own, according to Fortune. Jurors spent weeks reviewing internal Meta communications, public statements, and testimony before reaching their verdict on September 25, 2026.
The jury’s core finding was stark: more than 43 million separate violations of state consumer-protection law. New Mexico’s statute allows penalties of up to $5,000 per violation, which is why the math escalated so quickly. Judge Mathew’s October 21 order confirmed the jury’s liability finding and then exercised judicial discretion to scale the penalty down from the theoretical maximum to $25 billion, a figure he said still reflected the scope and duration of the conduct at issue.
Inside the $25 Billion Penalty: From $219 Billion to $25 Billion
The gap between the jury’s violation count and the final dollar figure is the part of this ruling that will likely draw the most legal scrutiny. Multiplying 43 million violations by the $5,000 statutory ceiling produces a number north of $200 billion, a sum Judge Mathew himself calculated at more than $219 billion before reducing it, per The Information. Courts routinely reduce maximum statutory penalties when they conclude the full figure would be disproportionate, and that appears to be what happened here, though the judgment itself does not confirm whether Meta has already remitted any payment or whether the $25 billion figure is considered final and non-appealable.
For context on scale, $25 billion is roughly five times the $5 billion penalty the Federal Trade Commission imposed on Facebook in 2019, which at the time was described as a record-setting figure for a privacy case. That earlier settlement resolved allegations that Facebook violated a 2012 consent order governing how it handled user data.
| Case Detail | Figure or Fact |
|---|---|
| Plaintiff | State of New Mexico |
| Defendant | Meta Platforms, Inc. (Facebook) |
| Court | State District Court, Santa Fe, New Mexico |
| Presiding judge | Francis J. Mathew |
| Case originally filed | 2021 |
| Jury verdict date | September 25, 2026 |
| Final judgment date | October 21, 2026 |
| Violations found by jury | More than 43 million |
| Statutory cap per violation | Up to $5,000 |
| Statements reviewed at trial | 29 statements by Meta and its leadership |
| Statements ruled misleading | 26 of 29 |
| Maximum penalty calculated by the court | More than $219 billion |
| Final penalty ordered | $25 billion, payable to New Mexico |
The Cambridge Analytica Data Trail That Started It All
New Mexico’s lawsuit traces back to Cambridge Analytica, the political consulting firm that obtained Facebook user data through a third-party app years before the state filed suit. Data tied to roughly 87 million Facebook profiles was pulled into that episode, and prosecutors argued the information was ultimately used for targeted political advertising connected to the 2016 presidential election, according to reporting reviewed in the case record.
That scandal first became public in 2018 and triggered congressional hearings, a wave of state investigations, and the FTC’s 2019 settlement. New Mexico’s case took a different path: rather than relying on a federal regulator, the state attorney general’s office built its own consumer-protection claims in state court, a strategy that Axios described as notable because it shows a single state can extract a penalty larger than what a federal agency obtained nationwide.
26 of 29 Statements Ruled Misleading
A central piece of New Mexico’s case rested on specific public statements made by Meta and its leadership about user control over personal data. Jurors examined 29 such statements and concluded that 26 of them were misleading. That 90 percent failure rate is a significant part of why the jury arrived at such a large violation count, since each misleading statement could be tied to millions of individual user interactions covered by the state’s consumer-protection statute.
The specific content of each of the 26 statements has not been broken out publicly in full, and this article does not speculate on which individual claims were found false beyond what has been reported. What is confirmed is that the jury viewed the pattern of statements, taken together, as part of a broader practice of describing privacy protections that did not match what was actually happening with user data behind the scenes.
Judge Mathew’s Reasoning
In his written judgment, Judge Mathew did not treat the misleading statements as isolated missteps. He concluded that the communications reflected a sustained pattern rather than scattered errors, writing that “these communications were part of a coherent strategy designed to mislead the public,” according to court filings cited by The New York Times.
That framing matters legally. Characterizing the conduct as a coordinated strategy, rather than individual lapses, supports treating each of the 43 million violations as part of one overarching course of conduct, which in turn supports a large aggregate penalty even after judicial reduction from the theoretical maximum. It also sets up a harder road for Meta if the company appeals, since appellate courts generally defer to trial-level factual findings about intent and pattern of conduct unless the record clearly contradicts them.
How the New Mexico Verdict Compares to Meta’s 2019 FTC Settlement
Meta has now faced two headline privacy penalties in less than a decade, and the contrast between them is instructive. The 2019 FTC settlement was a negotiated agreement reached with a federal regulator and came bundled with new oversight and compliance requirements. Facebook founder and chief executive Mark Zuckerberg said at the time that “as part of this settlement, we’re bringing our privacy controls more in line with our financial controls,” framing the deal as a structural fix rather than purely a fine, per the company’s own statement archived on its newsroom site.
The 2026 New Mexico judgment is different in kind. It followed a full jury trial rather than a negotiated settlement, it came from a single state rather than a federal agency, and it is five times larger in dollar terms. Where the FTC case ended with Meta agreeing to new documentation requirements for data use, the New Mexico case ends, at least for now, with a nine-figure-plus cash judgment and a judge’s finding of a deliberate strategy to mislead.
| Company | Year | Enforcer | Penalty | Basis |
|---|---|---|---|---|
| Facebook/Meta | 2019 | Federal Trade Commission | $5 billion | Violating a 2012 FTC consent order on user privacy controls |
| Meta | 2026 | State of New Mexico | $25 billion (reduced from a $219 billion statutory calculation) | 43 million+ consumer-protection violations tied to Cambridge Analytica-era data practices |
| Apple | 2026 | Private settlement (iPhone case) | $250 million | Payouts of up to $95 per affected device, per this outlet’s prior reporting |
| Character.AI | 2026 | Coalition of 40 states plus Wisconsin | Ongoing legal challenge | Scrutiny of a bankruptcy sale process, per this outlet’s prior reporting |
Historical Context: A Decade of Facebook Privacy Reckonings
The New Mexico judgment did not emerge from nowhere. It sits at the end of a long chain of events that began when Cambridge Analytica’s access to tens of millions of Facebook profiles became public in 2018. That disclosure led to Zuckerberg testifying before Congress, a collapse in public trust in the platform’s data practices, and ultimately the FTC’s 2019 enforcement action.
New Mexico’s attorney general kept building a separate state-level case even as the federal matter wound down, filing suit in 2021 and pushing it through five years of litigation to a jury verdict in September 2026. That persistence is part of why legal observers are treating this judgment as a bigger story than a routine fine. It shows that a state can pursue its own theory of liability for years after a national news cycle has moved on, and still land a penalty that dwarfs the original federal settlement.
What Regulators and Former Officials Have Said About Facebook’s Privacy Practices
The language used around Meta’s 2019 FTC settlement still reads as a preview of the themes that resurfaced in the New Mexico trial. Then-FTC Chairman Joe Simons said at the time that “despite repeated promises to its millions of world-wide users that they could control how their personal information is shared, Facebook took steps to undermine consumers’ choices,” in remarks delivered at the FTC’s Facebook settlement press conference in July 2019.
Simons also called that 2019 penalty unprecedented, noting that “the magnitude of the $5 billion penalty and sweeping conduct relief are unprecedented in the history of the FTC,” a claim that now looks modest next to New Mexico’s $25 billion figure. On Meta’s side, Zuckerberg described the 2019 agreement as a turning point for internal process, saying the company would have to “document any risks and the steps we’re taking to mitigate them” before shipping features that touch user data, in a 2019 statement Facebook posted announcing the FTC deal. Those commitments were made seven years before a New Mexico jury concluded that Meta’s public statements about data control were misleading in 26 of 29 instances reviewed at trial.
Market and Investor Reaction
Specific trading data following the judgment was not available at publication time, and this article does not speculate on share-price movement. What is clear from the scale of the number is that a $25 billion state court judgment is large enough to register as a material legal liability on Meta’s balance sheet, separate from the ongoing costs of the company’s AI infrastructure buildout. Whether Meta books a reserve against the judgment, moves to appeal, or seeks a negotiated reduction will likely shape how analysts treat the figure in upcoming earnings commentary.
The timing is notable on its own. Meta has spent 2026 aggressively expanding its consumer AI products, including efforts chronicled in coverage of Meta Muse’s rivalry with OpenAI’s Dots assistant, even as this privacy case worked toward a verdict. A $25 billion judgment lands as a counterweight to that AI narrative, giving investors a reminder that legacy Facebook-era legal exposure has not been resolved just because the company’s public story has shifted toward AI products.
The Legal Precedent: Other States Watching Closely
New Mexico’s willingness to litigate a privacy case alone, without a multistate coalition or a federal partner, is likely to attract attention from other state attorneys general. State consumer-protection statutes vary widely in their per-violation penalty caps, but New Mexico’s result demonstrates that even a $5,000 statutory ceiling can produce a nine-figure outcome when a jury finds tens of millions of violations.
That playbook echoes other recent efforts by states to hold technology companies accountable outside of federal enforcement. A coalition of 40 states plus Wisconsin has separately challenged the bankruptcy sale process involving Character.AI, another sign that state-level legal action against AI and social platforms has become a parallel track to federal regulation rather than a backup plan.
Competitive Comparison: How Big Tech’s Privacy Penalties Stack Up
Meta is not the only major technology company navigating consumer-protection exposure in 2026. Apple agreed to a $250 million settlement tied to an iPhone-related case, with payouts reaching up to $95 per affected device, a figure this outlet covered in its reporting on Apple’s iPhone settlement. Apple separately faces scrutiny over its HomeView product’s reliance on Siri AI, tied to a previously reported $250 million arrangement.
Microsoft, meanwhile, is under a different kind of regulatory pressure. The UK Competition and Markets Authority has moved to designate Microsoft with strategic market status over its grip on Copilot, a proceeding this outlet detailed in coverage of the CMA’s scrutiny of Copilot’s 20 million users. None of these cases approach $25 billion in scale, which is what makes the New Mexico judgment against Meta stand out as the largest state-driven consumer-protection penalty against a technology company so far this year.
What Happens Next: Appeal Odds and Open Questions
Large jury verdicts against major companies are routinely appealed, and nothing in the public record confirms that Meta has decided not to challenge this judgment or that the $25 billion figure is final. Companies facing judgments of this size typically have statutory windows to file post-trial motions and appeals, and courts can stay enforcement of a judgment while an appeal is pending.
Key open questions include whether Meta will seek further reduction of the penalty on proportionality grounds, whether the company will challenge Judge Mathew’s finding of a coordinated misleading strategy, and whether the $219 billion maximum calculation itself becomes a point of appellate dispute. None of these outcomes can be confirmed at this stage, and reporting should be read as describing the judgment as issued rather than as a closed matter.
Why This Case Is Different From Past Settlements
Unlike the 2019 FTC matter, which Meta negotiated and resolved through settlement, the New Mexico case went to a full jury trial. That distinction matters because a litigated verdict carries factual findings, including the determination that 26 of 29 reviewed statements were misleading and that the conduct reflected a coherent strategy, that a negotiated settlement would not typically produce. Settlements let a company resolve a dispute without admitting wrongdoing in most cases; a jury verdict does not offer that option.
It also matters that New Mexico pursued the case independently rather than joining a multistate group. A solo state effort that produces a $25 billion result sends a signal to attorneys general elsewhere that they do not need a large coalition, or a federal regulator’s backing, to extract a penalty of this magnitude from a major technology company.
5 Predictions for Meta and State Privacy Enforcement
- Meta will almost certainly file post-trial motions and likely an appeal, given the size of the judgment and the factual findings attached to it.
- Other state attorneys general will study New Mexico’s solo litigation strategy as a template for pursuing their own consumer-protection claims against large platforms.
- Analysts covering Meta’s next earnings call will press the company for clarity on reserves, appeal plans, and any potential settlement talks tied to the $25 billion figure.
- Meta’s public communications strategy around data and privacy will likely face renewed scrutiny, given the judge’s finding that 26 of 29 statements reviewed were misleading.
- Expect comparisons between this case and the 2019 FTC settlement to become a recurring reference point in coverage of future privacy litigation against Meta and other platforms.
Frequently Asked Questions
How much was Meta ordered to pay in the New Mexico case?
Judge Francis J. Mathew ordered Meta Platforms, Inc. to pay $25 billion, payable to the State of New Mexico, after a jury found the company liable for more than 43 million consumer-protection violations.
Why did the penalty drop from $219 billion to $25 billion?
Judge Mathew calculated that the statutory maximum, based on 43 million violations at up to $5,000 each, exceeded $219 billion. He then reduced that figure to $25 billion in the final judgment, a step courts can take when the maximum statutory penalty is considered disproportionate to the conduct.
Is this related to the Cambridge Analytica scandal?
Yes. New Mexico’s case traces back to Cambridge Analytica, the political consulting firm that obtained data tied to roughly 87 million Facebook profiles, which was reportedly used for targeted advertising connected to the 2016 election.
Did Meta deceive all of its users, or just users in New Mexico?
The confirmed case concerns New Mexico consumers and specific statements made by Meta and its leadership. It does not establish a finding covering all Facebook or Meta users globally.
Has Meta already paid the $25 billion?
That has not been confirmed. The judgment was issued October 21, 2026, and there is no public confirmation of payment, nor confirmation that the ruling is final or beyond appeal.
How does this compare to Meta’s 2019 FTC settlement?
The New Mexico judgment is five times larger than the $5 billion Meta paid the FTC in 2019. It also differs structurally: the 2019 case was a negotiated settlement, while the 2026 New Mexico case followed a full jury trial and judicial finding of a misleading strategy.
Will Meta appeal the ruling?
No public confirmation of an appeal decision has been reported. Given the size of the judgment, legal observers widely expect Meta to pursue post-trial motions or an appeal, though this has not been confirmed.
What statements did the jury find misleading?
Jurors reviewed 29 public statements made by Meta and its leadership about user data controls and found 26 of them misleading. The specific content of each statement has not been broken out in full public reporting.
