There’s a number big enough that it stops registering as money and starts registering as just a headline — twenty-five billion dollars is one of those. This month, a New Mexico judge attached that exact figure to something much smaller and more familiar: whether a company told its users the truth about how their data was handled.
What the judge actually ordered
The order itself: a New Mexico judge, Francis Mathew, has ordered Meta to pay $25 billion in penalties after a jury found the company deceived users about its privacy protections. The penalty is directed to the state’s education system, not to individual Facebook users who were affected.
That last detail is worth sitting with before anything else. If you’re a longtime Facebook user reading this and wondering whether a check is coming, the answer is no — this isn’t a consumer-restitution case. It’s a state enforcement penalty, and the money goes to New Mexico’s schools.
$25 billion is one of the largest penalties of its kind in recent U.S. legal history. It’s also, as you’ll see below, smaller than what the state originally asked for — and that gap matters for understanding what actually happened here.
The jury verdict behind the number
What came first: back on September 26, a Santa Fe jury found that Meta violated New Mexico’s Unfair Practices Act more than 43 million separate times through its privacy misrepresentations. That verdict settled the underlying question — not an allegation anymore, a jury’s actual finding of liability.
This month’s $25 billion figure is the next step after that: the penalty phase, where a judge decides what the company actually owes because of a liability the jury had already established weeks earlier. The order didn’t reopen the question of whether Meta did something wrong. It answered what that wrong is now going to cost.
If you followed this case back in September, this is the sequel you were waiting for — the part where an abstract jury finding turns into an actual number.
Where $25 billion actually comes from, legally
The math behind the figure: New Mexico’s Unfair Practices Act allows penalties of up to $5,000 per violation. Multiplied across more than 43 million violations, the theoretical ceiling here runs into the hundreds of billions. A $25 billion order is a fraction of that maximum — a real, enormous number that’s still well short of what the law technically permitted.
That context changes how you might read the headline. $25 billion isn’t a judge throwing the book at Meta with no restraint. It’s a judge applying real judgment within a legal ceiling high enough that the actual order represents meaningful discretion, not a rubber stamp on the state’s ask.
It’s a reminder that even a record-setting number can still be, legally speaking, a measured one.
How this connects to the state’s earlier $40 billion ask
The number that changed: New Mexico’s attorney general had asked the court for penalties of up to $40 billion. The judge’s actual order, at $25 billion, lands well below that request. If you only remember the $40 billion figure from earlier coverage, the gap between the ask and the order is the part that completes the story.
That’s not unusual in cases like this one — a requested maximum and an actual award are rarely the same number, and the difference reflects a judge’s independent weighing of the evidence, not a loss for either side. The state still secured one of the largest penalties on record. Meta still faces a bill in the tens of billions.
Both things are true at once, and neither cancels the other out.
The data at the center of this, again
What this traces back to: the underlying matter is the Cambridge Analytica-era exposure of roughly 87 million users’ data, a story that’s now years old but whose legal consequences are still working their way through courts state by state. New Mexico’s case focused specifically on what Meta told its own users about how that data was protected.
If 87 million sounds familiar, it should — this is the same breach that reshaped how most people think about app permissions and data-sharing settings in the years since. The legal fallout from it has simply taken this long to reach a dollar figure in at least one state.
You don’t need to remember every detail of that original scandal to understand this ruling. You just need to know that the number attached to it keeps growing as more courts finish weighing in.
What “ordered” does and doesn’t mean yet
What happens next: Meta has said directly that it plans to appeal. C.J. Mahoney, the company’s chief legal officer, said in a statement that Meta is confident it will “prevail on appeal.” During the penalty phase, Meta’s own lawyers argued the maximum penalty should have been closer to $3.4 billion, and that anything larger violates due process and wouldn’t survive appellate review — so the $25 billion figure itself, not just the underlying liability, is something an appeals court could still revisit and lower.
That doesn’t make this month’s order meaningless — a jury’s liability finding and a judge’s penalty order are both real, binding steps, not symbolic ones. It does mean “ordered to pay” and “has paid” aren’t the same sentence yet, and probably won’t be for a while.
This is reporting on where the case stands today, not a prediction of how an appeal resolves.
What this means for the apps you use every day
You’re not going to see this $25 billion in your own bank account, and that’s by design — this was never built as a payout to users. What it offers instead is something you can actually use: confirmation that a court, looking closely at how a major platform described its own privacy protections, found the gap between promise and practice large enough to warrant one of the biggest penalties handed down against a tech company.
You don’t have to read every privacy policy word for word because of this ruling. It’s a fair prompt, though, to notice which apps you’ve connected to your accounts, and to remember that the fine print platforms ask you to click past isn’t just boilerplate — it’s something a court can hold a company to, years later, once the facts are fully known.