Lego's BrickLink marketplace offline for three days after 'unusual activity', cause still undisclosed

A long-time collector reports being wrongly accused of theft over a duplicate payment request and says the disruption has distressed her.
Lego is my stress relief.
Collector Melanie Hoskin on why the BrickLink outage and a payment dispute have hit her so hard.
Mark

Start with the basics. What actually happened to BrickLink?

Mimi

Lego took it offline after spotting what it calls unusual activity. It's been down three days, and the homepage says Lego wants to fully understand the problem before restoring it.

Mark

Why does this site matter so much?

Mimi

It's where collectors worldwide buy and sell secondhand sets, hunt for individual bricks and get limited editions. It started as a fan project before Lego bought it in 2019.

Luke

Has anyone said it was hacked?

Mimi

No. Lego hasn't said whether it was breached or whether customer data was affected.

Luke

So 'unusual activity' could mean a lot of things, and we shouldn't fill the gap ourselves.

Mark

What about Melanie Hoskin's story?

Mimi

She's a cyber professional and a collector of 45 years. After paying for a pre-order, she got multiple payment links, and she says Lego doubted her payment and threatened a ban. It's resolved now.

Luke

Is that connected to the shutdown?

Mimi

That's unclear. Lego says it knows of no wider payment issues.

Luke

Then it's one customer's account, not evidence of a pattern.

Mark

And the return date?

Mimi

A Wednesday evening estimate was posted, then deleted, with nothing in its place. That's the thing to watch.

  • Lego pulled its BrickLink marketplace offline after detecting unusual activity, and collectors who came looking for it found only an empty page.
  • The company first blamed maintenance, then admitted the shutdown only after the BBC asked questions, which deepened suspicion and confusion.
  • A long-time collector says a duplicate payment request left her feeling accused of theft, and the disruption has left her shaken and unable to enjoy her Lego room.
  • A promised Wednesday return message has been deleted, leaving no timeframe for restoration.
  • Lego has not said whether hackers got in or whether customer data was exposed, so the story is still waiting on its most important answers.

For three days, a marketplace that collectors have long relied on to trade secondhand bricks and chase limited releases has sat dark, and the company that owns it has offered only a few careful words. Lego, which acquired the fan-founded platform in 2019, says it shut BrickLink after spotting unusual activity and wants to understand fully what happened before reopening it. The larger questions, whether anyone broke in and whether customers' information was touched, remain unanswered, as they often do in the early days of such episodes. For the people whose hobby lives on that site, the silence is its own kind of weight.

For three days, anyone trying to visit BrickLink has met the same empty page. The marketplace, which collectors call the eBay of Lego, was taken offline by its owner after what Lego describes as unusual activity, and the company has been reluctant to say more.

The only explanation so far is brief. A homepage message says Lego wants to fully understand what happened before bringing the site back, and that message appeared only after the BBC made inquiries. Until then, visitors had been told the site was simply under maintenance. Lego has not said whether the platform was hacked or whether customer data was affected.

For many buyers, BrickLink is more than a shop. Collectors use it to trade secondhand sets, hunt for individual bricks and buy limited editions. Melanie Hoskin, a cyber security professional who has collected Lego for 45 years, pre-ordered a limited release and paid for it, only to receive repeated requests to pay again. She says Lego doubted her payment and suggested it might ban her, and she felt accused of theft. That issue has since been resolved, and Lego says it knows of no wider payment problems, though whether the two events are connected remains unclear.

Hoskin says Lego has long been her refuge, a hobby she shared with her sisters, and that she has not been able to walk into her Lego room for weeks because the situation makes her angry.

The timeline has also grown murkier. A message promising a return by Wednesday evening has been removed, and no new date has been offered. What comes next is a restoration date, and a clear statement on whether the site was breached and whether customers' data was touched.

For three days, anyone who visited BrickLink has found the same thing: a site that is not there. The marketplace, which collectors know as the eBay of Lego, has been taken offline by its owner, and Lego has so far declined to say why.

What the company has said is brief. After detecting what it called unusual activity on the platform, it pulled BrickLink down. A message on the homepage says Lego wants to fully understand what happened before bringing the site back, which it describes as containing the issue, investigating how it happened and checking for related issues. That message appeared only after the BBC contacted the company. Until then, visitors had been told the site was down for maintenance.

The message leaves the central questions open. Lego has not said whether BrickLink was breached or hacked, and it has not said whether any customer data was affected.

BrickLink matters to a particular kind of Lego buyer. Collectors around the world use it to buy and sell secondhand sets, to track down individual bricks, and to purchase limited edition releases. It began as a fan project, and Lego acquired it in 2019.

One of those regular users is Melanie Hoskin, who works in cyber security and has collected Lego for 45 years. She told the BBC that she had pre-ordered a limited edition release on the platform and paid for it, yet then received multiple links asking her to pay again. According to her, Lego did not believe her payment had gone through, and at one point said it would ban her from BrickLink. She said she felt she had been accused of theft.

That problem has since been resolved, and Lego said it is not aware of wider payment issues. Whether the duplicate payment requests have any connection to the unusual activity that led to the shutdown is unclear.

Hoskin described what the hobby means to her. Lego, she said, is her stress relief, something she grew up with and which bonded her with her sisters. She has a Lego room at home, and said she has not been able to walk into it for the past couple of weeks because the situation angers her.

The timeline has also grown less certain. Earlier on Tuesday, a message on BrickLink said the platform would return by Wednesday evening. That message has been deleted, and the site now gives no timeframe for its return.

What to watch for is plain: a restoration date, and any statement from Lego on whether the site was breached and whether customers' data was touched.

That means containing the issue, investigating how it happened and checking for related issues.
— Lego, homepage message
Lego is my stress relief.
— Melanie Hoskin, collector
Quer a matéria completa? Leia o original em BBC News ↗
Fale Conosco FAQ