Skip to content
breach.observer
Wednesday, October 21, 2026
Cybersecurity news without the noise
175 reports on file
Privacy & Policy

What does the $25 billion New Mexico ruling mean for Meta users?

A New Mexico judge reduced Meta’s privacy penalty to $25 billion after a jury found 43 million violations of state law regarding misleading data practices.

What does the $25 billion New Mexico ruling mean for Meta users?
Illustration: Breach Observer

Key points

  • Meta faces a $25 billion fine in New Mexico for misleading users about data privacy and content moderation.
  • The penalty stems from the Cambridge Analytica scandal, with a jury counting 43 million violations of state law.
  • The state will use the funds for its school system, with 15% annual interest accruing until the amount is paid.

New Mexico residents whose data was involved in the Cambridge Analytica scandal face no immediate operational changes, but the state has secured a $25 billion penalty against Meta. A judge reduced the initial award from $219 billion to this final figure, according to court filings released on Wednesday.

The ruling follows a September jury verdict that found Meta liable for 43 million violations of New Mexico’s Unfair Practices Act. Each violation carried a potential civil penalty of up to $5,000, leading to the initial multi-hundred-billion-dollar assessment. Judge Francis Mathew cited the willful nature of the company’s conduct as justification for the substantial remaining sum.

Context of the ruling

The case centres on statements Meta made to consumers regarding data privacy, third-party data misuse, and content moderation after the Cambridge Analytica incident became public in 2018. According to the court filing, senior leadership, including Mark Zuckerberg and Sheryl Sandberg, oversaw a strategy to mislead the public about user control over data.

The filing notes that Facebook continued to make public representations about its enforcement protocols despite internal knowledge that it could not fulfil those promises. The state argued that the company exploited the fact that users could not verify the accuracy of these claims.

Who is affected

The litigation focused specifically on New Mexico residents who used Facebook during the period in question. The state’s Attorney General, Raúl Torrez, stated that the lawsuit targeted the company’s misleading statements about privacy settings and its handling of misinformation and hate speech.

This case is separate from the $942 million settlement Meta reached with nearly every other US state over child safety concerns. New Mexico opted out of that broader agreement to pursue this specific trial regarding the Cambridge Analytica data harvesting and subsequent corporate communications.

Our take on the response

Meta has announced it will appeal the decision, with chief legal officer C.J. Mahoney describing the penalty as a tax on speech. The state intends to direct the funds toward New Mexico’s school system. Interest will accrue on the unpaid balance at a rate of 15% per year until the fine is settled in full.

What affected people can do

Users should review their current privacy settings to ensure third-party apps have minimal access to their profile information. Check whether old accounts or linked services still retain permissions they no longer need. Be vigilant for phishing attempts that reference this high-profile ruling to trick users into revealing credentials. Verify the source of any urgent requests for personal data or payment, as scammers often exploit major news stories to create a false sense of urgency.

What to do and how to stay safe: Meta

  • Audit connected applications and remove access for any services you no longer use or trust.
  • Enable multi-factor authentication on all social media accounts to prevent unauthorized access.
  • Review your data download settings to understand what information is currently stored on the platform.
  • Monitor your email and messages for suspicious links claiming to offer refunds or legal updates related to this case.

Step-by-step guide: Detect Online Tracking: Signs in Logs, Browsers and Network Traffic

General security guidance from the Breach Observer newsroom. It is not confirmed advice from the organisations named in this story.

Frequently asked questions

How much is Meta fined in New Mexico?

Meta must pay $25 billion, a reduction from the initial $219 billion award, with 15% annual interest accruing until paid.

What was the fine based on?

The penalty is based on 43 million violations of New Mexico’s Unfair Practices Act for misleading users about data privacy and content moderation.

Does this affect users outside New Mexico?

This specific ruling and penalty apply to New Mexico residents; however, Meta has settled similar issues with other states separately.

Sources

  1. Neowin
  2. The Record
  3. Engadget

Further reading