Lego marketplace BrickLink offline after ‘unusual activity’ detected

The popular secondary Lego marketplace widely nicknamed the ‘eBay of Lego’ — BrickLink, a platform originally founded by a Lego hobbyist before the official Lego Group acquired it in 2019 — has been fully taken offline after the company detected uncharacteristic, suspicious activity across its digital infrastructure. For decades, BrickLink has served as a central global hub for millions of Lego enthusiasts, collectors, and casual builders to trade pre-owned complete sets, source individual rare or out-of-production bricks, and purchase hard-to-find limited-edition Lego releases. Prior to the formal public disclosure of the incident, the platform had been inaccessible for three consecutive days, with a generic placeholder message initially claiming the outage was part of routine scheduled maintenance. The Lego Group only issued a detailed public update on the situation after the BBC reached out for comment, noting in a public homepage statement that it would not restore full service to BrickLink until its security teams had completed a full, end-to-end review of the anomalous event. The company outlined that this investigative process would contain the active issue, trace the root cause of the unusual activity, and conduct a full sweep for any linked hidden vulnerabilities, but declined to confirm unsubstantiated claims of a full data breach or hacking incident, and shared no details on whether any user personal data or payment information had been exposed during the event. One long-time BrickLink user, Melanie Hoskin, a 45-year Lego collecting veteran and cyber industry professional, shared her own troubling experience in the lead-up to the outage: after pre-ordering a limited-edition Lego set on the platform and completing her payment in full, she received repeated, unprompted payment links demanding she pay for the item a second time. She recounted that BrickLink support initially insisted her original payment had never been processed, and even threatened to issue a permanent platform ban against her, leaving her feeling unfairly accused of attempted theft. Hoskin, who describes Lego as a core lifelong stress reliever and a shared childhood bonding activity with her sisters, noted she had been unable to even enter the dedicated room in her home that houses her extensive Lego collection for weeks, as the frustration with the platform’s missteps left her too upset to engage with her long-time hobby. While the Lego Group later confirmed that Hoskin’s individual payment glitch had been resolved, and stated it had found no evidence of widespread system-wide payment processing errors, it has not clarified whether this isolated payment issue is connected to the broader unusual activity that triggered the full platform shutdown. Earlier on the day of the announcement, a temporary message posted to BrickLink’s landing page had promised the platform would resume full operations by Wednesday evening, but that notice was quickly removed, and the Lego Group has since declined to share any concrete estimated timeline for when users will regain access to the marketplace.