New Mexico Trials Meta Over Cambridge Analytica Data Breach
The state is the only one to reject a landmark multi-state settlement, seeking maximum penalties for data exploitation.
New Mexico began opening statements in Santa Fe on Wednesday, September 10, 2026, in a high-stakes trial against Meta. The state is the only one pursuing a trial over the Cambridge Analytica data breach after 48 other states reached a massive settlement with the company.
At the center of the case is the allegation that a personality quiz harvested data from approximately 87 million Facebook profiles, which was subsequently sold to the political consulting firm Cambridge Analytica. New Mexico estimates that 350,000 of its residents were directly exposed to the breach, though state prosecutors argue the resulting harm extended to all 2 million residents of the state. The state is now seeking maximum civil penalties under the New Mexico Unfair Practices Act, which could reach $5,000 per violation.
The Path to Trial
The lawsuit, originally filed in 2021, stems from the global controversy surrounding the 2016 U.S. Presidential election. While most states settled a multi-state suit in August 2026—a deal that included an $18 billion payment addressing privacy and child safety—New Mexico opted to go its own way. Florida also declined the settlement, though for different reasons. New Mexico's decision to proceed to trial is a deliberate attempt to hold Meta accountable for specific misrepresentations regarding how user data was collected and exploited.
According to the state, the data was weaponized to target Democratic voters with messages such as "Hillary's got it, you don't need to vote" in an effort to suppress turnout. Furthermore, the state alleges that Facebook internally flagged more than 2,000 apps for similar issues but failed to alert users or force the deletion of data to avoid public fallout. New Mexico Attorney General Raúl Torrez stated that the breach "didn't just expose private information, it revealed a pattern of misrepresentation about how user data was collected, shared, and exploited."
Industry Implications
This trial represents a rare instance of a state government refusing a corporate settlement to seek a formal judicial determination on data privacy and election interference. The outcome could set a critical legal precedent for how state Unfair Practices Acts are applied to Big Tech data breaches. Specifically, the court's decision will determine whether individual user exposure can be counted as separate violations, which would lead to massive cumulative penalties.
What's Next
As the trial progresses in Santa Fe, the court will weigh the state's claims of systemic negligence against Meta's defense. Facebook attorney Dane Butswinkas argued that the company takes action to minimize risk to its users, noting that while the process is "not perfect," the company does take action. The proceedings will now move into the evidentiary phase to determine if Meta's failures constitute a violation of state law.