Meta's Data Breach: A $25 Billion Penalty in New Mexico

A New Mexico judge ordered Meta to pay $25 billion this week for violating state consumer protection laws. The amount represents the largest fine the company has ever faced. The penalty stems from a finding that the firm misled users about how it handled their data.

The state filed the lawsuit in 2021 under the Unfair Practices Act. The original dispute traced back to the Cambridge Analytica scandal. The attorney general later added claims regarding Meta's content moderation policies. A jury sided with the state in September. The judge then calculated the financial penalty based on the number of violations found.

Meta has stated it will challenge the outcome on appeal. C.J. Mahoney, the company's chief legal officer, described the ruling as an attempt to impose a tax on speech. He argued that the attorney general's enforcement approach makes it all but impossible to do business in the state. Mahoney expressed confidence that the company will prevail in the next legal phase.

The $25 billion figure is part of a larger pattern of legal setbacks for Meta this year. Earlier, a New Mexico jury ordered the company to pay $375 million for child safety violations. A second phase of that same trial produced an additional $567 million order. In August, Meta agreed to pay between $17 billion and $18 billion over ten years to settle a federal case with most U.S. states. A Los Angeles court also awarded $6 million to a woman for mental health damages, with Meta covering most of the cost.

The total penalty is lower than the $35 billion to $45 billion requested by the state's attorneys. The maximum possible penalty was calculated at $219 billion, based on 43 million violations. Judge Francis Mathew reduced that maximum figure to the final $25 billion amount. Meta's current valuation stands at approximately $1.7 trillion.

The New Mexico trial placed more than 100 exhibits on the public record. These documents had been kept secret for over a decade. One exhibit is a 2018 email from Sheryl Sandberg, then COO. She wrote that a million developers had access to the data and warned of many more moments like this in the coming year. Corban Rhodes, a partner at the firm representing New Mexico, noted that this public evidence will influence future litigation.

Legal experts suggest that financial pressure may be necessary to force operational changes. Brian Quinn, a law professor at Boston College, said shareholders might demand that the company stop indemnifying directors who repeatedly appear in litigation. This would leave executives less protected from personal liability. Insurers may also play a role by making responsible design a condition of coverage.