Feed aggregator
LEGO’s BrickLink taken offline: What users should know
- LEGO has taken BrickLink offline after detecting unusual activity
- The company has not confirmed a hack or whether customer data was affected
- Users should watch for suspicious payment requests and avoid reusing passwords
LEGO collectors looking for a missing piece have a bigger problem to contend with: accessing the specialized marketplace BrickLink.
LEGO has taken BrickLink offline after detecting what it calls “unusual activity.” The company says it is investigating before bringing the marketplace back, but has not disclosed whether attackers accessed its systems or whether customer information was affected.
BrickLink allows users to buy and sell LEGO parts, sets, and minifigures, making it a useful resource for collectors and a business platform for independent sellers. LEGO acquired the fan-founded marketplace in 2019. Its disruption leaves more than unfinished builds on hold: sellers also depend on access to orders and their storefronts.
The BrickLink website previously said it would remain unavailable until at least Wednesday, November 11. That date has now been removed, with no replacement given.
We took BrickLink offline after identifying unusual activity on the platform. Our immediate priority was to secure the site, protect our members and ensure the integrity of BrickLink.
Before bringing the site back online, we need to fully understand what has happened. That means containing the issue, investigating how it happened and checking for related issues.
This work is still on-going and we appreciate your patience while we work to get things back online as soon as possible.
Updated: 11th November 2026
According to the BBC, LEGO had not provided details confirming a hack or explaining whether customer data was affected.
Specialist LEGO publications reported that BrickLink went offline around November 5. An article published the following morning described a notice saying the site was unavailable while teams carried out “necessary work.” That report also noted that users could not access storefronts, profiles, order histories, or the Designer Program page.
In November 2023, BrickLink also closed down after it noticed what turned out to be credential stuffing attacks.
The BBC also reported the experience of a BrickLink customer who received repeated payment links for a limited-edition preorder she said she had already paid for. The dispute was subsequently resolved, and LEGO told the BBC it was not aware of wider payment issues. But there is no established connection between that payment problem and the activity that prompted the shutdown.
How to stay safeUntil we know what the issue is, it is hard to provide targeted advice, but users can take a few proportionate precautions:
- Watch for unexpected account or payment messages. A request to “restore access,” confirm payment information, or resolve an urgent account problem deserves scrutiny, because these are common phishing themes.
- Verify requests through an independent route. Use the official website or an established support channel rather than following links in an unexpected email or text.
- Use unique passwords. If your BrickLink password is also used elsewhere, change it on those other services now. Use a password manager to generate and store strong, unique passwords. Change your BrickLink password once the site is available again.
BrickLink’s shutdown is disruptive, but the available evidence does not yet justify calling it a confirmed data breach. For now, the priority for users is to follow official updates, check unexpected payment requests carefully, and watch for scams exploiting the outage.
Something feel off? Check it before you click.Malwarebytes Scam Guard helps you analyze suspicious links, texts, and screenshots instantly.
Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.
Apple’s HomeView Tries Face Authentication Without FaceID
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
The post Chrome, Firefox Updates Patch Over 180 Vulnerabilities appeared first on SecurityWeek.
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign
Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories.
The post Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign appeared first on SecurityWeek.
Warning after research shows AI agents can hack into a wind farm, access engineering data and shut down electricity supplies
AI is giving intelligence agencies new capabilities to sift and analyse communications on a previously unimaginable scale. What safeguards are being applied to protect individuals and to ensure UK’s agencies don’t go beyond their lawful powers?
A former subpostmaster is appealing a 1998 conviction that was based on evidence from the Post Office’s faulty Capture system
Why IIoTjob Exists
Article URL: https://iiotjob.com/blog/why-iiotjob-exists
Comments URL: https://news.ycombinator.com/item?id=50466767
Points: 1
# Comments: 0
The Legendary SS United States Completes Its Final Descent to the Gulf Floor [video]
Article URL: https://www.youtube.com/watch?v=XZ10zfIh0SM
Comments URL: https://news.ycombinator.com/item?id=50466758
Points: 1
# Comments: 1
Finland grants Tesla permission to drive "hands free"
Article URL: https://yle.fi/a/74-20256369
Comments URL: https://news.ycombinator.com/item?id=50466751
Points: 1
# Comments: 0
Microsoft is retiring SMS and voice MFA: here's what you need to know
Article URL: https://resilientsecurity.be/microsoft-is-retiring-sms-and-voice-mfa-heres-what-you-need-to-know/
Comments URL: https://news.ycombinator.com/item?id=50466749
Points: 1
# Comments: 0
Local Analytics Doesn't Need a Database Server
Article URL: https://duckdb.org/2026/11/12/local-analytics-without-a-database-server
Comments URL: https://news.ycombinator.com/item?id=50466742
Points: 1
# Comments: 0
Capsulla DLP – Google Chrome Extension for Data Security
Article URL: https://capsulla.io
Comments URL: https://news.ycombinator.com/item?id=50466726
Points: 1
# Comments: 0
Show HN: Ephemeral GitHub Actions Runners on Cloudflare Containers
Article URL: https://github.com/kelvindesman/cf-container-runners
Comments URL: https://news.ycombinator.com/item?id=50466689
Points: 1
# Comments: 0
Connecting a Real IBM 3270 Terminal to an Emulated Mainframe with OEC
Article URL: https://www.rs-online.com/designspark/connecting-a-real-ibm-3270-terminal-to-an-emulated-mainframe-with-oec
Comments URL: https://news.ycombinator.com/item?id=50466671
Points: 1
# Comments: 0
Show HN: Closed,Mechanical Mould Design AI Agent
Article URL: https://closed.sh
Comments URL: https://news.ycombinator.com/item?id=50466670
Points: 1
# Comments: 0
It Can Be Done (2003)
Article URL: https://multicians.org/andre.html
Comments URL: https://news.ycombinator.com/item?id=50466669
Points: 2
# Comments: 0
Show HN: Leafpress- a static site generator for digital gardens
leafpress is a modern, minimalistic, opinionated static-site generator for digital gardeners like me. It allows wrapping over any existing folder of MD files and quickly generate website from it. Common markdown and Obsidian-specific syntax/features are supported.
It offers decent amount of UI configurability with a JSON-based config file that allows tweaking colours, fonts, navigation, etc. It’s also much faster than most of the SSGs out there.
I built this because I was more or less irritated with all the tools out there for this- all of them needed either too much configuration and extra work to support full needs of a digital garden.
Comments URL: https://news.ycombinator.com/item?id=50466659
Points: 1
# Comments: 0
Van Gogh's Starry Night riding game with Fable 5.2
Article URL: https://twitter.com/ebbyamir/status/2120284261089673376
Comments URL: https://news.ycombinator.com/item?id=50466652
Points: 3
# Comments: 0
Show HN: Qmail a local mail client with CLI tools for your agent
Article URL: https://github.com/mattgauzza/quickMail
Comments URL: https://news.ycombinator.com/item?id=50466650
Points: 1
# Comments: 0
