LEGO’s BrickLink marketplace has remained offline since around November 5 after the company detected “unusual activity,” turning what was initially presented as routine maintenance into a weeklong security investigation. The service’s latest notice says LEGO took the platform down to secure it, protect members and preserve its integrity, but gives no timetable for restoring access.
BrickLink initially told users that “necessary work” would keep the marketplace unavailable temporarily, with service expected to return on November 9. That deadline passed, followed by another expected return date on November 11. The current notice says the company must first contain the issue, investigate how it happened and check for related problems.
LEGO has not said whether the activity resulted from an intrusion, whether attackers accessed accounts or systems, or whether personal information was exposed. There is currently no publicly identified CVE, vendor security advisory, proof-of-concept exploit, exploitation-in-the-wild report or threat-actor attribution tied to this outage. The language indicates a potentially security-related event, but does not establish that BrickLink suffered a confirmed cyberattack or data breach.
The shutdown affects buyers and independent sellers using BrickLink to trade LEGO sets, parts and minifigures. LEGO says the marketplace has more than one million members and more than 10,000 stores across 70 countries, making the disruption significant for a specialist e-commerce ecosystem. Users should rely on LEGO or BrickLink’s official channels for updates, avoid unsolicited password-reset or payment requests, and use unique passwords and multifactor authentication wherever those protections are available.
The incident follows earlier security concerns involving the platform. In 2022, researchers at Salt Labs disclosed API flaws that could have enabled account takeover, exposure of personal information and server-side attacks; LEGO subsequently mitigated those issues. BrickLink’s own 2023 incident FAQ said information from a relatively small number of accounts may have been accessed, while stressing that the service did not store credit-card details. Neither event confirms what caused the current outage, and LEGO has yet to publish technical findings or an impact assessment.
