Incident Response, Data Security, Business continuity, Risk Assessments/Management

Lego-owned marketplace BrickLink remains offline following security incident

filter: null; fileterIntensity: null; filterMask: null; captureOrientation: 0;
runfunc: 0; algolist: 0;
multi-frame: 1;
brp_mask:0;
brp_del_th:0.0000,0.0000;
brp_del_sen:0.0000,0.0000;
motionR: 0;
delta:null;
bokeh:0;
module: remosaic;hw-remosaic: true;touch: (-1.0, -1.0);sceneMode: 8192;cct_value: 0;AI_Scene: (-1, -1);aec_lux: 221.97794;aec_lux_in...

The Register disclosed that the Lego-owned marketplace BrickLink has remained inaccessible for nearly one week following the discovery of unusual activity on its platform.

The site, which serves as a primary hub for enthusiasts to trade Lego sets and individual pieces, initially described the downtime as necessary maintenance. However, the platform failed to meet its projected November 9 return date. While the company has not explicitly confirmed a cyberattack, its stated focus on containing the issue, investigating the root cause, and protecting member data suggests a significant security breach. The outage has frustrated many users, particularly adult fans of Lego who have criticized the organization for a lack of transparency regarding the incident.

BrickLink, which was acquired by the Lego Group in 2019, hosts more than 10,000 storefronts. As the investigation continues, the marketplace remains behind a maintenance splash page, leaving buyers and sellers unable to conduct transactions. The Lego Group has not provided further details regarding the nature of the disruption or a revised timeline for restoring full service to the community.

Source: The Register

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds