Rick borden

Cyber-attacks or similar unforeseen events can affect payment or communication systems in a manner that prevents a party to a commercial contract from fulfilling its obligations. While parties may be able to rely on force majeure provisions in many of their commercial agreements, North American credit agreements generally do not have force majeure or similar provisions that provide a framework for dealing with cyber-attacks or similar events.

On July 8, 2025, the Connecticut Attorney General (AG) publicly announced an enforcement action against TicketNetwork for violations of the CT Data Privacy Act (CTDPA). In this notable case—centered on improving Privacy notices, the Connecticut AG and TicketNetwork entered into an Assurance of Voluntary Compliance (AVC). Although TicketNetwork was fined only $85,000 under the AVC, the Agreement features significant injunctive provisions, as well as strict review and reporting requirements.