Lego's BrickLink marketplace offline since November 6 after 'unusual activity'; no confirmed breach or cyberattack
Matéria consolidada. Reúne 3 matérias que o Tifon tinha publicado separadamente sobre a mesma história. A IA reescreveu o relatório com o que as 3 fontes trouxeram em 13/11/2026 00:00; os links antigos trazem para cá.
Fontes: theregister.com ↗ malwarebytes.com ↗ infosecurity-magazine.com ↗
Lego Group has kept its BrickLink parts marketplace offline since November 6, 2026, after detecting "unusual activity" on the platform (theregister.com). As of November 12, the site was still down. It had first been expected back on November 9, and the maintenance page was last updated on November 11 (theregister.com). Lego says it is prioritizing site security, member protection and platform integrity while it investigates (infosecurity-magazine.com). It has not confirmed a hack, cyberattack or data compromise, and no account compromises have been confirmed (malwarebytes.com, infosecurity-magazine.com). The cause, scope and restoration date are undisclosed. The adult fan community is frustrated and is asking for more transparency (theregister.com). BrickLink was acquired by Lego in 2019 and hosts over 10,000 storefronts (theregister.com).
Detalhes técnicos
- Lego's wording (securing the site, containment, ongoing investigation) suggests a significant security incident, but this is an inference by theregister.com, not a vendor statement.
- Users reported being unable to reach storefronts, profiles and order histories (malwarebytes.com).
- One customer reported suspicious repeated payment requests. Lego found no evidence of widespread payment issues (malwarebytes.com).
- Earlier BrickLink security history: API vulnerabilities reported by Salt Labs in 2022, and a 2023 incident that caused downtime (infosecurity-magazine.com). Malwarebytes.com describes the 2023 incident as a credential stuffing attack that led to a temporary shutdown. Infosecurity-magazine.com says it led to password prompts for users.
- No IOCs, attribution or attack vector have been published.
Remediação
- Watch for phishing that references BrickLink or the outage, and verify any request independently (malwarebytes.com).
- Use unique passwords for BrickLink accounts (malwarebytes.com).
- Sellers and buyers should monitor payment activity for unexpected or repeated requests.
- Defenders should treat this as a medium priority until Lego publishes findings (malwarebytes.com).
Relatos divergentes
- Outage start: Theregister.com, the most recent source, dates the outage to November 6. Malwarebytes.com says access problems began in "early November". Infosecurity-magazine.com gives no start date and says the downtime duration is unknown.
- Restoration timeline: Infosecurity-magazine.com says it is unknown. Theregister.com reports an initial target of November 9 that was missed.
- Severity: Malwarebytes.com stresses there is no confirmed breach. Theregister.com infers a significant incident from Lego's language. Lego itself has confirmed neither.
Linha do tempo
-
Lego's BrickLink Marketplace Offline for Nearly a Week Following 'Unusual Activity' Investigation
ler a análise desta fonte ocultar
BrickLink, the Lego-owned online marketplace for buying and selling Lego sets and individual parts, has been offline since November 6 due to "unusual activity" detected on the platform. The site was initially expected to return on November 9 but remains down with a maintenance page updated on November 11. Lego has not confirmed a cyberattack but references to securitization, containment, and ongoing investigation suggest a significant security incident. The outage has frustrated the adult fan community, with calls for greater transparency. BrickLink was acquired by Lego in 2019 and hosts over 10,000 storefronts. The exact cause and extent of the incident remain undisclosed as investigations continue.
-
LEGO's BrickLink marketplace taken offline due to unusual activity, no confirmed data breach yet
ler a análise desta fonte ocultar
LEGO has temporarily taken its BrickLink marketplace offline after detecting unusual activity on the platform. The company has not confirmed any system hack or data compromise and is investigating the incident thoroughly before restoring service. BrickLink users have experienced access issues since early November, including inability to access storefronts, profiles, and order histories. Past incidents include a credential stuffing attack in 2023 leading to a temporary shutdown. While one customer reported suspicious repeated payment requests, LEGO found no evidence of widespread payment issues. Users are advised to watch for phishing attempts, verify requests independently, and use unique passwords. No confirmed data breach has been announced, making this a medium priority for defenders as the investigation continues.
-
Lego Takes BrickLink Marketplace Offline Due to Unusual Activity and Cybersecurity Concerns
ler a análise desta fonte ocultar
The Lego Group has taken its online Lego parts marketplace, BrickLink, offline following detection of "unusual activity" on the platform. The company prioritizes securing the site, protecting members, and ensuring platform integrity while investigating the cause of the issue. The downtime duration and service restoration timeline remain unknown. BrickLink, acquired by Lego in 2019, has a history of security issues, including API vulnerabilities reported by Salt Labs in 2022 and a previous incident in 2023 resulting in site downtime and password prompts to users. No confirmed account compromises are reported in this incident yet.