LEGO's popular online marketplace BrickLink has been offline for over a week after the company detected what it called “unusual activity on the platform.” The site, often described as the “eBay of LEGO,” was taken down on 5 November and remains unavailable as of 12 November, with a homepage message stating it is “temporarily unavailable.”
BrickLink serves as a vast secondary market where enthusiasts and small businesses across Europe and beyond buy and sell individual LEGO parts, sets, and minifigures. Its prolonged downtime has left many independent sellers in countries like Germany, the Netherlands, and Poland unable to process orders, raising concerns about financial losses.
In a statement published on the community site Jay's Brick Blog, LEGO explained its decision: “We took BrickLink offline after identifying unusual activity on the platform. Our immediate priority was to secure the site, protect our members and ensure the integrity of BrickLink.”
The company added that it needs to “fully understand what has happened” before restoring service, including containing the issue, investigating how it occurred, and checking for related problems. “This work is still on-going, and we appreciate your patience while we work to get things back online as soon as possible,” the statement said.
Cybersecurity concerns for online marketplaces
Xavier Bellekens, CEO of cybersecurity firm Lupovis, told Euronews Next that the incident serves as “a reminder that cybercriminals don’t just target banks or critical infrastructure.” Online marketplaces like BrickLink are attractive targets because they hold user accounts, payment details, and personal data that can be exploited for fraud or phishing campaigns.
“Taking the platform offline is a sensible precaution, but every additional day of downtime has a real financial impact on the businesses that rely on it,” Bellekens added. For many small sellers in the EU, BrickLink is a primary sales channel, and the outage has disrupted their operations during a key shopping period.
The incident comes amid broader European efforts to strengthen online security and consumer protection. The EU has recently unveiled a Digital Fairness Act aimed at curbing manipulative online practices, and lawmakers are considering bans on manipulative design tricks. While these measures focus on user experience, cybersecurity remains a parallel concern for platforms hosting commercial transactions.
LEGO has not disclosed the nature of the unusual activity or whether any user data was compromised. The company has not provided a timeline for BrickLink's return, leaving sellers and buyers in limbo. For now, the marketplace remains dark, and the LEGO community is waiting for answers.
