BrickLink (Lego marketplace) — week-long outage after 'unusual activity', suspected security incident
Severity: medium · Patch status: no-fix-needed · Since 2026-11-12
Lego-owned marketplace BrickLink has been offline since Friday 2026-11-06 after the company identified 'unusual activity on the platform'. The site serves only a maintenance page, last updated 2026-11-11, and references to securing the site, containment and investigation suggest a security incident rather than routine maintenance, though BrickLink has not confirmed a cyberattack. An initial promise to restore service by 2026-11-09 passed without the site returning. Buyers and sellers of Lego sets, parts and rare minifigures — over 10,000 storefronts at acquisition — cannot trade, and AFOL community members have criticised the lack of transparency. Lego did not respond to The Register's request for comment. No fix applies; the incident is under investigation.
What to do
- If you trade on BrickLink, assume account credentials may be at risk and change passwords reused there
- Watch for phishing emails impersonating BrickLink support during the outage
- Monitor BrickLink communications for confirmation of data exposure before resuming transactions
- Avoid paying sellers through off-platform channels proposed during the outage
Sources
All live incidents on Threat Watch
