Lego takes BrickLink marketplace offline after unusual activity

Lego Group has taken its BrickLink Marketplace offline after identifying “unusual activity” on the platform, with an update posted on 11 November stating that the immediate priority was to secure the site, protect members and ensure the integrity of BrickLink. The firm said it is currently investigating the activity and needs to “fully understand” what happened before bringing the site back online, noting that the aim is to contain the issue, investigate how it occurred and check for related issues. It remained unclear how long the downtime would last or when the service would be reinstated.

BrickLink is an online marketplace owned by Lego Group where independent third‑party sellers can buy and sell individual Lego parts. Lego Group acquired BrickLink in 2019. The marketplace has previously faced security issues: Salt Labs investigated API vulnerabilities in 2022 that could have allowed account takeovers, data leakage and access to internal production data; Lego resolved those issues after Salt Labs disclosed them.

In November 2023 BrickLink was taken offline for several days due to a suspected cybersecurity incident. Professional Lego reviewer Jay Ong reported that users were prompted to update passwords during that downtime, though he was reassured in an email that his BrickLink account had not been compromised.