Post

LEGO's BrickLink Taken Offline What Users Should Know

LEGO's BrickLink Taken Offline What Users Should Know

LEGO has taken BrickLink offline after detecting what it calls “unusual activity.” The company is currently investigating the situation before bringing the marketplace back online. However, they have not disclosed whether attackers accessed their systems or if customer information was affected.

In November 2023, BrickLink also closed down due to what turned out to be credential stuffing attacks.

What Happened?

Specialist LEGO publications reported that BrickLink went offline around November 5. An article published the following morning described a notice indicating that the site was unavailable while teams carried out “necessary work.” Users have been unable to access storefronts, profiles, order histories, or the Designer Program page. This disruption affects sellers who depend on access to their orders and storefronts.

LEGO’s Statement

“We took BrickLink offline after identifying unusual activity on the platform. Our immediate priority was to secure the site, protect our members, and ensure the integrity of BrickLink. Before bringing the site back online, we need to fully understand what has happened. That means containing the issue, investigating how it happened, and checking for related issues.”

According to the BBC, LEGO has not provided details confirming a hack or explaining whether customer data was affected. The BrickLink website previously stated it would remain unavailable until at least Wednesday, November 11, but that date has now been removed without a replacement.

User Precautions

Until more information is available, users are advised to take the following precautions:

  • Watch for unexpected account or payment messages.
  • Scrutinize requests to “restore access,” confirm payment information, or resolve urgent account problems, as these are common phishing themes.
  • Verify requests through an independent route. Use the official website or an established support channel rather than following links in unexpected emails or texts.
  • Use unique passwords. If your BrickLink password is also used elsewhere, change it on those other services now.
  • Consider using a password manager to generate and store strong, unique passwords.
  • Change your BrickLink password once the site is available again.

Conclusion

While BrickLink’s shutdown is disruptive, the available evidence does not yet justify calling it a confirmed data breach. For now, users should follow official updates, check unexpected payment requests carefully, and remain vigilant against scams exploiting the outage.

Read full article

This post is licensed under CC BY 4.0 by the author.