Thursday, April 17, 2025
Homecyber securityMeta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal...

Meta paid a $1.4 Billion Settlement for the Unauthorized Capture of Personal Biometric Data

Published on

SIEM as a Service

Follow Us on Google News

Texas Attorney General Ken Paxton has secured a $1.4 billion settlement with Meta Platforms Inc. (formerly known as Facebook) over the unauthorized capture and use of millions of Texans’ personal biometric data.

This settlement marks the largest privacy settlement ever obtained by an Attorney General from a single state and serves as a significant warning to companies engaged in practices that violate privacy rights.

Largest Privacy Settlement in History

The $1.4 billion settlement dwarfs previous records, including a $390 million settlement obtained by 40 states from Google in late 2022.

- Advertisement - Google News

This case is the first lawsuit and settlement under Texas’s “Capture or Use of Biometric Identifier” Act (CUBI), highlighting the state’s commitment to protecting its citizens’ privacy rights.

Attorney General Paxton emphasized the importance of holding major technology companies accountable for violating privacy laws.

“After vigorously pursuing justice for our citizens whose privacy rights were violated by Meta’s use of facial recognition software, I’m proud to announce that we have reached the largest settlement ever obtained from an action brought by a single State,” said Attorney General Paxton.

“This historic settlement demonstrates our commitment to challenging the world’s biggest technology companies and holding them accountable for breaking the law and violating Texans’ privacy rights. Any abuse of Texans’ sensitive data will be met with the full force of the law.”

Meta’s Unauthorized Data Collection

In February 2022, Attorney General Paxton sued Meta for unlawfully capturing the biometric data of millions of Texans without obtaining their informed consent as required by Texas law.

The lawsuit revealed that Meta’s data collection practices violated both the CUBI and Deceptive Trade Practices Act.

How to Build a Security Framework With Limited Resources IT Security Team (PDF) - Free Guide

Meta’s facial recognition software, initially introduced in 2011 as a Tag Suggestions feature, automatically scanned and recorded facial geometry from photographs uploaded to Facebook without users’ knowledge or consent.

The settlement agreement, reached after only two years of litigation, requires Meta to pay the state of Texas $1.4 billion over five years.

Attorney General Paxton credited the aggressive litigation efforts of co-counsel firms Keller Postman and McKool Smith with achieving this historic outcome.

Zina Bash served as Lead Counsel for Keller Postman, while Sam Baxter and Jennifer Truelove led the team from McKool Smith.

This settlement underscores the importance of informed consent in data collection practices and serves as a precedent for future privacy enforcement actions.

Texans can now rest assured that their biometric data will be protected under the full force of the law.

Are you from SOC and DFIR Teams? – Analyse Malware Incidents & get live Access with ANY.RUN -> Free Access

Divya
Divya
Divya is a Senior Journalist at GBhackers covering Cyber Attacks, Threats, Breaches, Vulnerabilities and other happenings in the cyber world.

Latest articles

Ransomware Attacks Surge 126%, Targeting Consumer Goods and Services Sector

The cybersecurity landscape witnessed a dramatic escalation in ransomware attacks, marking a concerning trend...

CrazyHunter Hacker Group Exploits Open-Source GitHub Tools to Target Organizations

A relatively new ransomware outfit known as CrazyHunter has emerged as a significant threat,...

Threat Actors Leverage Cascading Shadows Attack Chain to Evade Detection and Hinder Analysis

A sophisticated multi-layered phishing campaign was uncovered, employing a complex attack chain known as...

Microsoft Vulnerabilities Reach Record High with Over 1,300 Reported in 2024

The 12th Edition of the Microsoft Vulnerabilities Report has revealed a significant surge in...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Ransomware Attacks Surge 126%, Targeting Consumer Goods and Services Sector

The cybersecurity landscape witnessed a dramatic escalation in ransomware attacks, marking a concerning trend...

CrazyHunter Hacker Group Exploits Open-Source GitHub Tools to Target Organizations

A relatively new ransomware outfit known as CrazyHunter has emerged as a significant threat,...

Threat Actors Leverage Cascading Shadows Attack Chain to Evade Detection and Hinder Analysis

A sophisticated multi-layered phishing campaign was uncovered, employing a complex attack chain known as...