Meta faces $25B penalty in New Mexico over Cambridge Analytica privacy failures

Key points

• Meta was ordered to pay $25 billion in penalties by a New Mexico district court judge on October 21, 2026.
• The penalty follows a September jury verdict in Santa Fe that found Meta liable for misleading citizens about data collection and safeguards.
• The jury identified over 43 million violations of the New Mexico Unfair Practices Act, each carrying a potential $5,000 penalty.
• Judge Francis Mathew reduced the jury's calculated $219.5 billion award to $25 billion, noting the intentional and systematic nature of the violations.
• Interest on the penalty will accrue at 15% annually until the fine is fully paid.
• The case is separate from Meta's August $17 billion federal settlement with state attorneys general regarding child safety and mental health.

Background

The Cambridge Analytica scandal, which emerged in 2018, involved allegations that the political consulting firm improperly accessed data from 87 million users, raising significant questions about Facebook's data handling practices. In 2022, Meta agreed to pay $725 million to settle a related class action lawsuit. In September 2026, a New Mexico jury found Meta liable for deceiving users about privacy protections, with damages to be determined by a judge. This latest ruling is part of a broader pattern of legal challenges Meta faces regarding data privacy and platform safety, including a recent $375 million verdict in a separate New Mexico child-safety case.

How outlets are covering it

CNBC provides the most detailed account of the legal proceedings, highlighting the judge's reasoning for reducing the penalty from $219.5 billion to $25 billion and noting the 15% interest rate. AP News confirms the core facts of the $25 billion order and the connection to the Cambridge Analytica trial but offers less detail on the judicial reasoning. Axios covers the story with a similar headline but the provided text is largely obscured by cookie consent and technical code, offering no additional substantive details or differing perspectives on the ruling. All three outlets agree on the final penalty amount and the basis of the verdict, but only CNBC details the specific factors the judge considered in mitigating the initial jury award.

Why it matters

This $25 billion penalty represents one of the largest financial judgments against a tech company in the United States, signaling a significant shift in how state courts are addressing data privacy violations. The ruling underscores the potential financial risks for tech giants that fail to adequately investigate and address data breaches, even if they have settled other related cases. It also highlights the ongoing legal battles surrounding the Cambridge Analytica scandal and the broader implications for user data protection and corporate accountability in the tech industry.

What to watch

Meta has not yet commented on the penalty order, but the company has previously indicated it would appeal similar rulings, such as the $567 million abatement fund order in a related New Mexico child-safety case. The 15% interest rate on the $25 billion penalty will significantly increase the total cost if the fine is not paid promptly. Meta may also face further legal challenges or settlements in other jurisdictions as states continue to pursue data privacy cases related to the Cambridge Analytica scandal and other platform safety issues.