LEGO takes BrickLink offline after detecting unusual activity

LEGO has taken its BrickLink marketplace offline after detecting what it describes as “unusual activity” and is conducting an investigation before deciding when to restore access. The company has not confirmed a hack or whether customer data was affected. BrickLink, which enables buying and selling LEGO parts, sets and minifigures, remains inaccessible while teams assess the incident; LEGO has not provided a timeline for completion beyond notices of ongoing work. The BrickLink site previously indicated it would be unavailable until at least Wednesday 11 November, a date subsequently removed without a replacement.

Reporting from the BBC suggests LEGO has not disclosed details confirming a breach or data exposure. Specialist LEGO outlets note BrickLink went offline around 5 November, with notices indicating the site was unavailable for “necessary work”, restricting access to storefronts, profiles, order histories and the Designer Program page. BrickLink previously shut down in November 2023 after credential stuffing attacks; however, the BBC reports no established connection between that issue and the current disruption.

A BrickLink customer described receiving repeated payment links for a limited-edition preorder she had already paid for; LEGO told the BBC it was not aware of wider payment problems, and no firm link to the outage has been established.

Until more information is available, Malwarebytes advises users to watch for unexpected account or payment messages, verify requests through official channels, and ensure unique passwords across services. The article emphasises monitoring for scams exploiting the outage and using a password manager to store strong, unique credentials.