Meta's $25 Billion New Mexico Penalty: How the Count Worked

Illustration of a judge's gavel beside stacks of gold coins and a smartphone showing padlock and eye privacy icons, set before a sandstone courthouse and New Mexico desert mesas, representing Meta's $25 billion penalty

A New Mexico judge ordered Meta on October 21, 2026 to pay $25 billion because a jury found that Facebook misled users about privacy, data sharing and moderation 43.9 million times. The penalty is counted per person who could have heard each false statement, not per person harmed, and Meta has said it will appeal.

What Happened

On Wednesday, October 21, 2026, State District Judge Francis Mathew of New Mexico's First Judicial District Court in Santa Fe entered judgment against Meta Platforms in a consumer protection case the state first filed in 2021, under then-Attorney General Hector Balderas. The New Mexico Department of Justice announced the order as $25 billion in civil penalties under the state's Unfair Practices Act, the largest penalty Meta has ever been ordered to pay.

The judgment followed a jury verdict in September. According to the Santa Fe New Mexican, the jury found 43,899,720 violations of the act, built from 26 misleading statements Facebook made over roughly 11 years about how it handled user data and moderated content. It also found five "willful violations by unconscionable trade practices." Those five findings were not multiplied into the count; the advertising-trade publication PPC Land, which read the 20-page judgment, reports that the court treated them as aggravating factors instead.

At the statute's maximum of $5,000 per willful violation, the verdict implied a penalty of about $219.5 billion, more than the roughly $201 billion in revenue Meta reported for 2025. The state asked for $35 billion to $40 billion. Meta proposed no more than about $3.45 billion, Engadget reported. Judge Mathew settled on $25 billion without giving a formula for the figure, and ordered interest at 15% a year until the penalty is paid in full.

Attorney General Raúl Torrez called it one of the largest single-state verdicts against a company in American history. Meta's chief legal officer, C.J. Mahoney, said the ruling makes it "all but impossible to do business in the state of New Mexico," described the suit as a tax on speech, and said Meta is confident it will win on appeal.

Why It Matters

The headline number is large, but the method behind it is the bigger story. For years, privacy enforcement against Facebook in the United States ran through the Federal Trade Commission, whose 2019 settlement with the company carried a $5 billion penalty and a 20-year consent order. Meta argued at the penalty hearing that the FTC figure was a sensible yardstick. The court rejected that, saying the settlement could not be viewed in isolation, according to PPC Land's reading of the findings.

That matters because New Mexico's case shows a single state, using a decades-old consumer protection law, reaching a penalty five times larger than the federal one for a related set of conduct. Most states have an unfair-and-deceptive-practices statute of their own, often with per-violation civil penalties. If New Mexico's counting method survives appeal, every one of those laws becomes a much sharper tool against platforms with millions of local users.

It is also New Mexico's second trial win against Meta this year. In March a Santa Fe jury returned a $375 million verdict in the state's separate youth-safety case, which we covered in Meta's $375 million child safety verdict in New Mexico. New Mexico declined to join a broader multistate settlement that, per Engadget, included nearly $459 million for Cambridge Analytica claims, and went to trial instead. The result suggests that holding out can pay, at least on paper.

For ordinary Facebook users, nothing changes overnight. The money, if it is ever collected, goes to the state, not to individuals, and the court has not yet ruled on whether to order changes to Facebook's practices.

How It Works

The law: one violation per person in the audience

New Mexico's Unfair Practices Act lets the attorney general seek a civil penalty of up to $5,000 for each willful violation. The act does not say exactly what one "violation" is, and that is where this case was decided. The state argued, and the jury accepted, that each false or misleading statement counted once for every person in its "reasonably expected or anticipated audience" in New Mexico, not once for every person shown to have read it and been fooled.

PPC Land reports that the jury used two audience sizes. Some statements were multiplied by Facebook's monthly active users in the state, 1,386,648 people. Others were multiplied by the state's population of about 2.1 million, presumably because they were made in public forums that reached beyond Facebook's own users. Twenty-six statements times those audiences produces the 43.9 million figure.

The statements

The 26 statements span from May 2010 to August 2021, according to PPC Land. They fall into a few groups:

  • User control of data. Six statements about users being in control of who sees their information, including claims that Facebook does not sell user data.
  • Friends' data and the app audit. Ten statements about how third-party apps could reach the data of a user's friends, and about the App Developer Investigation Facebook launched after the Cambridge Analytica revelations in March 2018. The judge called that investigation "willfully ineffective"; the findings say it ran only 14 forensic audits in three years and notified users about just two apps.
  • Content moderation. Statements about misinformation, a "zero-tolerance" stance on hate speech, and equal enforcement of the Community Standards, the last of which the court tied to the CrossCheck system that gave some high-profile accounts different treatment.

Cambridge Analytica is the backdrop but not the claim. The state did not sue over the data harvesting itself. It sued over what Facebook told the public about privacy settings and app access before and after the scandal broke. If you want the background, our 2018 report on the UK ICO's maximum fine over the Analytica leak covers the original data flow.

From $219 billion to $25 billion

Once the jury fixed the count, the judge's job was to set the penalty at or below the maximum. Meta argued that anything near the requested range would violate due process and the Eighth Amendment's ban on excessive fines. According to PPC Land, the judgment answers the fines argument by noting that the Supreme Court has not held that the Eighth Amendment applies to corporations, and tests the penalty against a "rational relationship" standard drawn from a 1919 Supreme Court railroad case. It describes the act as remedial and points to the "clear intentional and systematic nature" of the misstatements. What it does not do is show the arithmetic behind $25 billion.

Interest and the money

The 15% annual interest is what makes a long appeal expensive. On $25 billion it works out to about $3.75 billion a year, or roughly $10 million a day, before any compounding. Torrez said proceeds from the act must go to capital spending on education, and state officials have pledged the money to schools. As one Santa Fe lawyer told the New Mexican, the win is "more symbolic right now than anything else" until appeals run their course.

What's Still Unknown

Whether the counting method survives. Meta's lawyers argued the jury made no finding that any New Mexican actually saw or heard the statements. Appellate courts will decide whether "anticipated audience" is a lawful way to count violations under the act. If it is not, the penalty could shrink by orders of magnitude.

How the $25 billion was chosen. The judgment does not explain why it picked $25 billion rather than the state's $35 billion floor or Meta's $3.45 billion. An unexplained figure is an easier target on appeal.

How interest is calculated. PPC Land notes the judgment does not say whether the 15% is simple or compound, or exactly when it starts. Over a multi-year appeal, that difference is worth billions.

Injunctive relief. The court reserved any order to change Facebook's practices pending further briefing. That ruling could matter more to users than the penalty, and it may also affect when Meta's appeal clock starts.

Bond and payment terms. The judgment does not set payment deadlines or say how much Meta must post as a bond to pause collection during appeal.

Copycat cases. Other attorneys general now have a template. Whether any file similar suits, or wait for New Mexico's appeals courts to rule, is an open question.

Frequently Asked Questions

Why was Meta fined $25 billion in New Mexico?

A Santa Fe jury found that Facebook made 26 misleading statements between 2010 and 2021 about user privacy, third-party app access to data and content moderation, violating New Mexico's Unfair Practices Act. Counting each statement once per person in its expected New Mexico audience produced 43.9 million violations. Judge Francis Mathew then set the civil penalty at $25 billion on October 21, 2026.

Is this a Cambridge Analytica fine?

Not directly. The case grew out of the Cambridge Analytica scandal, but New Mexico sued over what Facebook told the public about privacy controls, friends' data and its post-scandal app audit, not over the data harvesting itself. Ten of the 26 statements concerned friends' data and the App Developer Investigation, which the judge described as willfully ineffective. The rest covered user control, misinformation and hate speech.

How did 26 statements become 43.9 million violations?

The jury counted every statement once for each person in its reasonably expected audience in New Mexico. Some were multiplied by Facebook's 1,386,648 monthly active users in the state and others by the state's population of about 2.1 million. The state did not have to prove that any individual read a statement or was misled by it, which is the main point Meta will challenge on appeal.

Will Facebook users in New Mexico get any money?

No. This is a civil penalty paid to the state, not a class-action settlement or restitution fund. Attorney General Raúl Torrez said money recovered under the Unfair Practices Act must go to capital spending on education, and officials have pledged it to schools. Users would only see a direct effect if the court later orders changes to how Facebook handles data or moderation.

Does Meta have to pay now?

Probably not soon. Meta says it will appeal, and appeals of large judgments typically take years. The judgment does not set a payment deadline or bond terms. Interest accrues at 15% a year until the penalty is paid, roughly $3.75 billion a year on the principal, so delay is costly for Meta if the award is upheld.

How does this compare with the FTC's $5 billion Facebook penalty?

The 2019 FTC settlement was a negotiated federal penalty with a 20-year consent order covering all US users. New Mexico's $25 billion is a court-imposed state penalty, five times larger, for a state of about 2.1 million people. Meta argued the FTC amount should cap any proportional penalty, but the court rejected using the settlement as a yardstick.

Could other states bring the same kind of case?

Yes, in principle. Nearly every state has an unfair or deceptive practices law, and many allow per-violation civil penalties. Whether the anticipated-audience counting method works elsewhere depends on each statute's wording and how courts read it. Other attorneys general will likely watch New Mexico's appellate courts before committing to similar multi-year trials against Meta.

Related Reading

New Mexico's other trial against the company is explained in our report on the $375 million child safety verdict. For how European regulators have approached Meta's data practices, see what Spain's €479 million ruling means for digital advertising. If the case has you rethinking your own settings, our guide on how to protect your Facebook account privacy walks through the controls, and five companies that faced major data privacy breaches puts Facebook's record alongside other large leaks.