Vesti Faces N100m Lawsuit for Publishing Customer’s Financial Details Online

A Lagos-based legal practitioner, Miss Odunola Risikat Kehinde, has filed a fundamental rights enforcement suit against Vesti Technology Solutions Inc., a United States–based financial technology firm, for allegedly publishing her private financial details on social media without consent.

Through her counsel, Olumide Babalola, Esq., Kehinde is asking the Federal High Court, Lagos, to declare that the company’s action violated her constitutional right to privacy and breached the provisions of the Nigeria Data Protection Act (NDPA), 2023.

She is also seeking N100 million in general damages and a mandatory injunction compelling Vesti to delete the offending post from its official X (formerly Twitter) handle, @VestiOfficial.

In a 17-paragraph affidavit, Kehinde stated that she is a registered Vesti user (Account No. VYS2085862). She explained that the firm, headquartered at 1701 S. Bowen Road, Suite 450, Arlington, Texas, USA, provides digital financial services to Nigerian customers.

According to her, her ordeal began in September 2025, when she was unable to access or withdraw funds from her Vesti account. Despite repeated complaints, the issue reportedly remained unresolved.

Out of frustration, Kehinde took to social media to call the company’s attention to her plight. However, instead of addressing her concerns privately, she alleged that Vesti responded by publishing her personal financial transactions online.

She stated that on October 18, 2025, Vesti’s official handle posted:

“We apologise for any inconvenience, and our customer success team is working to ensure all issues are resolved. However, to provide some clarity, here are some facts. Below is a transaction summary for Kehinde Odunola / Active Period: September 17 to October… Contrary to your claim that you haven’t made any withdrawal in the past month, our records show that you have successfully withdrawn at least N1,000,000 within the last 30 days.”

Kehinde said the post, visible to over 200,000 followers globally, amounted to an unlawful exposure of her private financial information, describing the company’s conduct as reckless, defamatory, and contrary to data protection standards.

She added that the tweet remained online as of October 22, 2025, despite a formal demand letter from her solicitors on October 20, requesting its removal.

The applicant further alleged that Vesti’s failure to act demonstrated negligence in safeguarding user data and a disregard for the NDPA, which mandates strict confidentiality of personal information.

Kehinde said the disclosure caused her emotional distress, embarrassment, and reputational damage among family, friends, and business associates. She also expressed concern for her safety following the exposure of her financial details.

Attached to her affidavit were copies of the offending tweet (Exhibit K2), screenshots showing continued publication (Exhibit K3), and proof of legal fees (Exhibit K8).

Her counsel, Olumide Babalola, argued that Vesti’s action violated her constitutional right to privacy under Section 37 of the 1999 Constitution (as amended) and contravened Sections 24(1)(a) and 30 of the Nigeria Data Protection Act, 2023, which prohibit the unauthorised disclosure of personal data.

In her originating motion, Kehinde is seeking six reliefs, including:

• A declaration that Vesti’s conduct infringed her right to privacy under Section 37 of the Constitution.
• A declaration that the unauthorised disclosure was unfair and unlawful under the NDPA.
• A declaration that the company breached its statutory duty to ensure the confidentiality and integrity of user data.
• An order directing Vesti to delete all posts relating to her transactions.
• N100 million in general damages.
• Any other orders the court may deem fit to grant.

No date has yet been fixed for hearing.