New Mexico Takes Meta to Trial Over Cambridge Analytica Data Breach
Facebook’s parent company, Meta, is facing trial in New Mexico over allegations that it misled users about the collection and exploitation of their data during the 2016 U.S. election. The case centers on a personality quiz that harvested data from approximately 87 million Facebook profiles, which was later sold to political consulting firm Cambridge Analytica. The firm, which worked with Donald Trump’s 2016 campaign, used the data to create targeted ads.
Opening statements began Wednesday in Santa Fe’s state court, marking the only active trial against Meta over the Cambridge Analytica scandal. New Mexico Attorney General Raúl Torrez accused Facebook of a "pattern of misrepresentation" regarding how user data was handled. The state estimates that around 350,000 New Mexicans were affected by the breach.
The trial, expected to last four weeks, will include a video deposition from Meta CEO Mark Zuckerberg. New Mexico is seeking civil penalties of up to $5,000 per violation under its Unfair Practices Act, along with an injunction to prevent future data breaches.
The case stands out as the only remaining legal challenge related to Cambridge Analytica after 48 states reached a $18 billion settlement with Meta in August, which included a release from future liability over the breach. Florida was the only other state that did not join the agreement, deeming it insufficient.
Earlier this year, New Mexico secured $942 million from Meta in a separate case over child safety protections, with the court mandating new safeguards, including age verification and time limits on its platforms.
Meta cybersecurity rating report: https://www.rankiteo.com/company/meta
"id": "MET1788979060",
"linkid": "meta",
"type": "Breach",
"date": "1/2016",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '87 million globally, ~350,000 '
'in New Mexico',
'industry': 'Social Media/Technology',
'location': 'Global (with ~350,000 affected users in '
'New Mexico)',
'name': 'Meta (Facebook)',
'size': 'Large',
'type': 'Corporation'}],
'attack_vector': 'Third-party application (personality quiz)',
'data_breach': {'data_exfiltration': 'Yes (sold to Cambridge Analytica)',
'number_of_records_exposed': '87 million',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High (personally identifiable '
'information, behavioral data)',
'type_of_data_compromised': 'User profile data, personality '
'traits, political preferences'},
'description': 'Facebook’s parent company, Meta, is facing trial in New '
'Mexico over allegations that it misled users about the '
'collection and exploitation of their data during the 2016 '
'U.S. election. The case centers on a personality quiz that '
'harvested data from approximately 87 million Facebook '
'profiles, which was later sold to political consulting firm '
'Cambridge Analytica. The firm used the data to create '
'targeted ads for Donald Trump’s 2016 campaign.',
'impact': {'brand_reputation_impact': 'Significant reputational damage to '
'Meta',
'data_compromised': '87 million Facebook profiles',
'identity_theft_risk': 'High (personally identifiable information '
'exposed)',
'legal_liabilities': 'Civil penalties up to $5,000 per violation '
'under New Mexico’s Unfair Practices Act',
'systems_affected': 'Facebook user data systems'},
'initial_access_broker': {'entry_point': 'Third-party personality quiz '
'application',
'high_value_targets': 'User profile data for '
'political targeting'},
'investigation_status': 'Ongoing (trial in progress)',
'motivation': 'Political influence, financial gain',
'post_incident_analysis': {'corrective_actions': 'Potential injunction to '
'prevent future breaches, '
'enhanced data protection '
'measures (e.g., age '
'verification, time limits)',
'root_causes': 'Lack of transparency in data '
'handling, inadequate third-party '
'app oversight'},
'references': [{'source': 'New Mexico Attorney General’s Office'}],
'regulatory_compliance': {'fines_imposed': 'Potential civil penalties up to '
'$5,000 per violation',
'legal_actions': 'Trial in New Mexico state court, '
'previous $18 billion settlement '
'with 48 states',
'regulations_violated': 'New Mexico Unfair '
'Practices Act, potential '
'GDPR (if EU users '
'affected)'},
'response': {'communication_strategy': 'Public statements and legal defense'},
'stakeholder_advisories': 'Legal proceedings and public statements from Meta '
'and New Mexico AG',
'threat_actor': 'Cambridge Analytica',
'title': 'New Mexico Takes Meta to Trial Over Cambridge Analytica Data Breach',
'type': 'Data Breach',
'vulnerability_exploited': 'Misrepresentation of data handling practices'}