Shocking $25B Hit Slams Meta

Photo: David Esser / Shutterstock

A New Mexico jury’s finding that Meta committed 43,899,720 deceptive acts now carries a $25 billion price tag, signaling that words about privacy can be punished like actions in commerce.

Story Highlights

A Santa Fe jury found Meta misled New Mexicans about how Facebook gathered and protected user data.
Jurors flagged 26 of 29 public statements as misleading and tied them to the Cambridge Analytica scandal.
Each violation carried up to $5,000 under state law; a judge reduced a theoretical $219.5 billion to $25 billion.
Meta plans to appeal, arguing the state blurred privacy issues with free speech and showed no consumer harm.

What The Jury Decided And Why It Matters

Jurors in Santa Fe found that Meta violated New Mexico’s consumer-protection law more than 43 million times by making misleading statements about how Facebook collected and protected user data. The case tied those statements to the Cambridge Analytica controversy, where a political consulting firm obtained data from millions without clear consent. The verdict treated the conduct as intentional, not accidental, according to coverage of the court’s findings. This ruling tells companies that public promises about privacy carry real legal risk.

Jurors concluded that 26 of 29 Meta and executive statements misled users about privacy practices. Reports indicate the court accepted a method that counted violations by how many New Mexicans could have been exposed to each statement, landing on 43,899,720 total. That approach tracked the state’s theory that misleading messages in commerce can violate the law even without proof that each person changed behavior. This is a key shift from breach-only cases to speech-based accountability.

How The Bill Reached $25 Billion

New Mexico’s law allows up to $5,000 per violation. Multiplying that by 43,899,720 produced a theoretical $219.5 billion maximum. The judge cut that number to $25 billion, which still ranks among the largest privacy penalties reported against a technology company. The available reports do not include the full written analysis on proportionality or due process. That gap limits independent review of how the court selected the final amount within the statute’s bounds.

Courthouse reporting described how jurors mapped violations to the state’s population when statements appeared in major outlets, but did not publish each statement, outlet, or date. This leaves open questions about the exact reach of each message. Still, the basic math, the violation count, and the reduced award are consistent across major outlets. The ruling shows how state laws can convert mass-distributed corporate claims into massive civil exposure.

Meta’s Appeal And The Free Speech Fight Ahead

Meta said it would appeal. The company argues the state did not prove consumers were deceived or harmed and that New Mexico improperly mixed privacy rules with free speech issues. Meta’s leaders also point out that the company does not sell user data, pushing back on the broader narrative of misuse. On appeal, Meta is expected to challenge the counting method and argue constitutional limits on penalties and due process.

Meta just hit a record $25B penalty in New Mexico for 43 million privacy violations tied to the Cambridge Analytica scandal. On top of prior fines ($950M damages, a $17.1B settlement) and an FTC $5B fine, this ramps up pressure on tech giants to reform data privacy. Expect public… pic.twitter.com/FshqZXBnqo

— The Daily Tech Feed (@dailytechonx) October 21, 2026

The fight now moves from a jury’s fact findings to appellate courts that weigh legal standards and proportionality. If the judgment stands, states may copy this model and police privacy through public statements, not just data leaks. If appellate courts curb the award or the counting method, companies may gain wider room to speak about policies without similar risk. Either way, this case shows both parties’ core worry: powerful institutions can talk past the public, and the public pays the price.