NaijaOnPoint Nigeria reports that a major data privacy scandal has hit Vesti Technology Solutions Inc., a United States–based financial technology firm operating in Nigeria, after a customer, Miss Odunola Risikat Kehinde, filed a ₦100 million lawsuit accusing the company of illegally publishing her private financial transactions on social media.
Through her counsel, Olumide Babalola, Esq., Kehinde approached the Federal High Court in Lagos, alleging that Vesti’s actions violated her constitutional right to privacy and breached the Nigeria Data Protection Act (NDPA), 2023.
She is demanding ₦100 million in damages and a mandatory injunction compelling Vesti to delete the offensive post from its official X (formerly Twitter) handle, @VestiOfficial.
In her 17-paragraph affidavit, Kehinde, a registered Vesti user with account number VYS2085862, said her ordeal began in September 2025 when she was unable to access or withdraw funds from her account. After repeated complaints yielded no solution, she took to social media to draw attention to her plight; a move that, according to her, was met with humiliation instead of help.
On October 18, 2025, Vesti’s verified handle allegedly published her private financial details to over 200,000 followers, writing:
“We apologise for any inconvenience… Below is a transaction summary for Kehinde Odunola… Contrary to your claim that you haven’t made any withdrawal in the past month, our records show that you have successfully withdrawn at least ₦1,000,000 within the last 30 days.”
Kehinde described ... as a reckless, defamatory breach of confidentiality, stating that it caused emotional distress, embarrassment, and reputational damage among friends, family, and colleagues.
She noted that despite her lawyer’s formal demand letter dated October 20, the tweet remained online as of October 22, showing what she called Vesti’s disregard for user privacy and data protection laws.
Her legal team submitted evidence including the offending tweet (Exhibit K2), screenshots of its continued publication (Exhibit K3), and proof of legal expenses (Exhibit K8).
Babalola argued that Vesti’s actions constitute a gross violation of Section 37 of the 1999 Constitution (as amended) and Sections 24(1)(a) and 30 of the Nigeria Data Protection Act, 2023, which prohibit the unauthorised disclosure of personal data.
Kehinde’s suit seeks six reliefs, including:
-
A declaration that Vesti breached her constitutional right to privacy.
-
A declaration that the firm’s conduct violated the Nigeria Data Protection Act.
-
An order compelling Vesti to delete all related posts from its social media platforms.
-
An award of ₦100 million in general damages for emotional and reputational harm.
The case is yet to be assigned a hearing date at the Federal High Court, Lagos.