Meta Ordered to Pay $25B to New Mexico [2026]

A New Mexico judge ordered Meta Platforms to pay $25 billion on October 21, 2026, closing out a legal fight that traces back to the Cambridge Analytica data scandal nearly a decade ago. The order follows a September 25, 2026 jury verdict that found Meta liable for more than 43 million violations of the state’s consumer protection law, making this one of the largest penalties a state has ever won against a technology company on its own, without joining a multistate settlement.

The case, State of New Mexico v. Facebook Inc., was filed in 2021 by New Mexico Attorney General Raul Torrez. It argued that Meta misled Facebook users about how their data was collected, shared, and protected, and about the company’s efforts against hate speech and misinformation. According to CNBC, the penalty stems directly from the Cambridge Analytica affair, in which a political consulting firm tied to the 2016 presidential campaign obtained data from as many as 87 million Facebook users through a third party app.

Google · Preferred Sources

Don't miss new tech stories on Google

Add TrendinTech once in the Google app and our stories appear in your news suggestions.

Add Now

How the $25 Billion Figure Was Calculated

New Mexico’s consumer protection law allows civil penalties of up to $5,000 per violation. With more than 43 million violations on the books, that statutory ceiling theoretically pointed to a judgment north of $219 billion, a number state attorneys floated as the maximum exposure. Reuters reported that the state’s attorneys initially asked the court for between $35 billion and $40 billion in a filing on October 1, 2026, before Judge Francis Mathew of the First Judicial District Court settled on $25 billion in his final order.

Torrez said the money would go toward New Mexico’s public education system under state law, according to ABC13 Houston. Meta has not yet paid the judgment. Instead, the company posted a $1.8 billion bond and asked the court to reconsider its findings or grant a new trial, a standard procedural step for a defendant planning to appeal a verdict of this size.

Inside the Cambridge Analytica Case That Triggered the Lawsuit

The roots of this judgment go back to 2018, when reporting revealed that Cambridge Analytica, a British political consulting firm, had harvested personal data from tens of millions of Facebook users through a personality quiz app, then used that information to help build targeted political advertising tied to the 2016 election. Cambridge Analytica itself no longer exists as an operating company. Its related entities, SCL Group Limited, SCL Elections Limited, and Cambridge Analytica UK Limited, entered administration in May 2018, moved into compulsory liquidation soon after, and were reportedly dissolved by January 2026.

That left Meta, as Facebook’s parent company, as the only party left to answer for the fallout. New Mexico’s attorney general sued Meta in 2021 rather than joining other states in broader settlements, arguing the company’s own public statements about protecting user data were deceptive. According to the Albuquerque Journal, the state pursued this case as its own standalone action, distinct from federal enforcement efforts.

What the Jury Found: 26 of 29 Statements Ruled Misleading

Jurors in Santa Fe spent weeks reviewing 29 separate public statements Meta and its leadership made over the years about user data, hate speech, misinformation, and content moderation. They concluded that 26 of those 29 statements were false or deceptive. The exact violation count entered into the record was 43,899,725, tied to New Mexico’s Unfair Practices Act, which covers how companies collect, protect, share, and use personal information.

The kinds of assurances at issue mirror public statements Meta has made for years about its content policies. During a 2020 Facebook earnings call, founder and chief executive Mark Zuckerberg told investors, “We do not profit from misinformation or hate. And we do not want this content on our platforms.” A year later, in a 2021 company post, Meta Project Management Director Anna Stepanov wrote, “We remove content from Facebook when it poses a real risk of harm. Like graphic violence, hate speech or fake COVID cures.” Statements along these lines, about what Facebook does and does not allow and how it handles user data, formed the basis for the claims New Mexico brought to trial.

Judge Francis Mathew’s Order and Meta’s Next Move

Judge Mathew presided over closing arguments in late September 2026, where Meta’s defense was led by attorney Dane Butswinkas. After weighing the jury’s liability findings against the state’s requested penalty range, Mathew entered the $25 billion order on October 21. The Associated Press, via its AP News report, described the order as holding Meta liable for deceiving users about both privacy protections and content moderation practices on Facebook.

Meta’s decision to post a bond rather than pay signals the company intends to contest the ruling further. Posting a bond preserves Meta’s right to appeal while complying with the court’s immediate order, a common move in cases involving penalties this large. Whether an appellate court revisits the per-violation math, the scope of the 29 statements, or the $25 billion figure itself remains an open question that will likely play out over 2027.

Why New Mexico Fought Meta Alone

Most large tech privacy cases get resolved through multistate coalitions or federal settlements that spread penalties, and negotiating use, across dozens of attorneys general at once. New Mexico chose a different path. Rather than folding its claims into a broader settlement, Torrez’s office kept its case separate and took it all the way to a jury verdict. That decision meant New Mexico absorbed the full cost of years of litigation on its own, but it also meant the state controlled the outcome rather than splitting a settlement pool with other jurisdictions.

This is not the first time New Mexico has pursued Meta independently. The state has reportedly pressed separate legal action against the company over child safety protections, though the scope and final amount of that matter have not been independently confirmed. What is confirmed is that the state’s approach on the Cambridge Analytica case produced a far larger outcome than it likely would have received as part of a shared, multistate resolution.

Meta’s Privacy Penalty History: From the FTC to New Mexico

Date	Regulator or Court	Outcome	Status as of October 21, 2026
2019	U.S. Federal Trade Commission	$5 billion settlement	Paid, case closed
September 25, 2026	New Mexico jury, First Judicial District Court	43,899,725 violations found; 26 of 29 statements ruled misleading	Liability established
October 1, 2026	New Mexico Attorney General’s office	Requested $35 billion to $40 billion in penalties	Superseded by final order
October 21, 2026	Judge Francis Mathew, First Judicial District Court	$25 billion judgment ordered	Meta posted $1.8 billion bond, seeking reconsideration or new trial

The 2019 FTC settlement, also worth $5 billion, addressed separate allegations about Meta’s privacy program broadly and is unrelated to the New Mexico case beyond showing that this is not the company’s first nine figure, or in this case eleven figure, privacy penalty. The New Mexico judgment is five times larger than that earlier federal settlement, highlighting how much a state acting alone, with a jury trial rather than a negotiated settlement, can extract when it builds a case around specific public statements rather than broad privacy practices.

How the Verdict Compares to Other 2026 Tech Accountability Cases

Meta’s New Mexico judgment lands in a year already crowded with data related penalties and breach disclosures across the technology sector. Comparing the scale helps frame just how unusual a $25 billion state court judgment really is. Oracle disclosed a health data breach affecting 19.9 million people this year, Burger King Japan reported a breach touching 11.18 million records, and Apple agreed to a $250 million settlement over AI related consumer claims. None of those approach the scale of New Mexico’s win against Meta.

Case	Company	Scale	Type
New Mexico v. Facebook Inc.	Meta Platforms	$25 billion	State consumer protection judgment
EU charges over Telecom Italia deal	KKR	Up to $24.7 billion deal under scrutiny	Misleading information charges
Oracle Health breach	Oracle	19.9 million records exposed	Data breach
Burger King Japan breach	Burger King Japan	11.18 million records exposed	Data breach
AI settlement over consumer claims	Apple	$250 million	Class action settlement

What stands out in that comparison is the method, not just the dollar figure. Most of 2026’s big tech penalties came from regulators issuing charges, like the EU’s misleading information charges against KKR over its Telecom Italia deal, or from companies negotiating settlements to avoid trial. New Mexico instead took Meta through a full jury trial on specific statements the company made publicly, then let the jury decide whether each one was deceptive. That approach produced a verdict with far more statutory violations attached to it than any negotiated settlement would have generated.

What Americans Actually Think About Data Privacy

The New Mexico verdict did not emerge in a vacuum. Public trust in how social platforms handle personal data has been eroding for years, and survey data backs that up. A 2023 Pew Research Center study found that “81% of Americans said they were very or somewhat concerned about how companies use the data they collect about them,” a figure that has stayed stubbornly high since Cambridge Analytica first made headlines in 2018.

The same 2023 Pew Research Center research found that “67% of Americans said they understood little to nothing about what companies were doing with their personal data,” according to the organization’s report on how Americans view data privacy. Trust in corporate leadership to own up to mistakes fared even worse. The same study reported that “77% of Americans said they had little or no trust in leaders of social media companies to publicly admit mistakes and take responsibility for data misuse.” Back in 2018, shortly after the Cambridge Analytica story broke, Pew Research Center had already found that only 9% of social media users were very confident that social media companies would protect their data, a number that has not meaningfully recovered in the years since.

Those numbers help explain why a jury in Santa Fe was willing to find Meta liable on 26 of 29 statements. When a company’s own public assurances about privacy and content moderation are measured against a public that already doubts those assurances by wide margins, jurors have little reason to give the benefit of the doubt.

The Business Backdrop: Meta’s AI Push Collides With Legal Risk

The timing is notable because Meta has spent the past several weeks rolling out its biggest product push in years. On October 12, 2026, the company introduced Muse Wonder and Muse Wonder Full, described as its most capable AI models yet for agentic tasks like coding, document interpretation, and multistep workflows, with Muse Wonder Full going to Muse Code subscribers. A day later, Meta announced “Your Algorithm,” new AI powered controls letting users describe their interests in their own words to shape what shows up in Facebook Feed and Reels, a feature that inevitably touches the same kind of personal data practices at the center of the New Mexico case.

Meta also launched Meta One, a tiered subscription bundle spanning Instagram, WhatsApp, and Facebook plans, in mid September 2026, alongside an expanding lineup of Ray-Ban Meta smart glasses. None of these products are implicated in the New Mexico verdict directly, but they illustrate the tension Meta is navigating: expanding how deeply its AI and recommendation systems touch user data, at the exact moment a court has ruled that the company misled the public about data handling in the past. Developers building on Meta’s platforms and APIs, and enterprises weighing Meta’s AI tooling against rivals, will be watching how this judgment shapes the company’s compliance posture going forward, particularly as agentic AI products depend on broader access to user behavior data than older recommendation engines ever needed.

Market and Investor Reaction

A $25 billion judgment is a large number in absolute terms, but it lands against a company whose market capitalization is measured in the hundreds of billions of dollars, and whose quarterly advertising revenue alone regularly runs into the tens of billions. That scale is part of why the market reaction to this kind of ruling tends to be muted compared with the headline figure. Investors have also had months of lead time: New Mexico’s October 1 filing seeking up to $40 billion in penalties was already public, meaning the $25 billion final figure came in below the high end investors had been bracing for.

The bigger question for investors is precedent, not the immediate cash impact. If other states follow New Mexico’s model of pursuing solo litigation rather than joining multistate settlements, Meta and its peers could face a slower drip of large, unpredictable state court judgments rather than the kind of one time federal settlements that have historically let companies draw a line under a scandal and move on.

Historical Context: A Decade of Fallout From One Data Harvest

It is worth stepping back to appreciate just how long this story has run. The underlying data harvesting happened years before Cambridge Analytica became a household name in 2018. The firm and its related UK entities spent 2018 through 2025 in administration and liquidation before formal dissolution in January 2026, meaning the company that actually collected the disputed data ceased to exist as a going concern years before the court case against Meta even reached a jury. Meta paid its first related penalty, the $5 billion FTC settlement, in 2019, within a year of the scandal breaking. It has now taken until October 2026, roughly eight years after the scandal first surfaced and five years after New Mexico filed its lawsuit in 2021, for the state level consequences to fully materialize.

That timeline says something important about how tech accountability actually unfolds. Federal settlements can move relatively quickly once a company agrees to negotiate. State court litigation, by contrast, can take the better part of a decade to reach a verdict, but when it does, as New Mexico just demonstrated, it can produce a judgment five times larger than the original federal settlement for the same underlying conduct.

What Happens Next: Appeals, Payment, and Precedent

Meta’s posting of a $1.8 billion bond, rather than paying the $25 billion judgment outright, all but confirms the company plans to keep fighting this in court. The immediate next steps are a ruling on Meta’s request for reconsideration or a new trial, followed, if that request is denied, by a formal appeal. Bloomberg Law, reporting on the case, noted that Torrez’s office had originally sought as much as $219 billion in penalties under the statutory maximum before the court settled on the far lower $25 billion figure, a gap that itself gives Meta’s lawyers grounds to argue the number remains excessive even after the reduction.

None of the reporting reviewed confirms a payment deadline, a bonding schedule, or how long an appeal might take, so any of those details remain open. What is confirmed is that New Mexico’s attorney general has already signaled where the money is meant to go if the judgment survives appeal: into the state’s public school system.

Five Predictions for Big Tech Privacy Enforcement

Other state attorneys general will study New Mexico’s solo litigation strategy closely, and at least a handful are likely to file standalone consumer protection suits against major platforms rather than waiting for federal or multistate action.
Meta’s appeal is likely to stretch well into 2027, with the $1.8 billion bond standing in for payment throughout that process rather than the company settling quickly to close the matter.
Expect closer scrutiny of newer Meta products that touch personal data directly, including the “Your Algorithm” Feed and Reels controls and the Muse Wonder AI model family, as plaintiffs’ attorneys look for the next generation of public statements to test in court.
Other technology companies rolling out agentic AI features that rely on deep behavioral data access should anticipate similar consumer protection claims if their public marketing promises outpace what their systems can actually guarantee.
Investors in large consumer tech platforms will increasingly price in state level litigation risk as a recurring cost of doing business, rather than treating privacy penalties as rare, one off events following a single scandal.

Why This Case Matters Beyond Meta

The New Mexico verdict is a reminder that the Cambridge Analytica scandal never fully closed the book on corporate accountability for data misuse, it just moved the fight from front page headlines to slow moving state courtrooms. For every company building products on top of user data today, from AI assistants to recommendation engines, the lesson is not really about Meta specifically. It is about how a mismatch between what a company tells the public and what its systems actually do can turn into liability measured in the billions, years after the original conduct, once a motivated state prosecutor decides to take the case the distance of a full jury trial.

Frequently Asked Questions

How much was Meta ordered to pay New Mexico?
A judge ordered Meta Platforms to pay $25 billion to New Mexico on October 21, 2026, after a jury found the company liable for more than 43 million violations of the state’s consumer protection law.

What did the jury actually find?
On September 25, 2026, a jury in Santa Fe found that 26 of 29 public statements made by Meta and its leadership about user data, hate speech, and misinformation were false or deceptive, amounting to 43,899,725 violations of New Mexico’s Unfair Practices Act.

Is this related to the Cambridge Analytica scandal?
Yes. The case stems from allegations that Cambridge Analytica, a now dissolved political consulting firm, obtained data from as many as 87 million Facebook users through a third party app and used it for targeted political advertising tied to the 2016 election.

Has Meta paid the $25 billion judgment?
Not as of October 21, 2026. Meta posted a $1.8 billion bond and asked the court to reconsider its findings or grant a new trial, rather than paying the judgment directly.

Why was the final amount $25 billion instead of the maximum $219 billion?
New Mexico’s law allows penalties of up to $5,000 per violation, which theoretically could have produced a judgment above $219 billion. The state initially requested $35 billion to $40 billion, and Judge Francis Mathew ultimately set the final order at $25 billion.

Who is the judge and who led the state’s case?
Judge Francis Mathew of the First Judicial District Court entered the order. New Mexico Attorney General Raul Torrez’s office brought the case in 2021 and led it through trial.

Where will the $25 billion go if the judgment stands?
Attorney General Torrez said the penalty would go toward New Mexico’s public education system under state law.

How does this compare to Meta’s 2019 FTC settlement?
Meta separately paid $5 billion to the U.S. Federal Trade Commission in 2019 over broader privacy practices. The New Mexico judgment, at $25 billion, is five times larger and stems from a different, state level consumer protection case focused on specific public statements.

Meta Ordered to Pay $25B in New Mexico Privacy Case [2026]