BrickLink’s homepage was reachable Friday, Nov. 13, after a data-access incident, and the LEGO-owned marketplace said it would waive two months of seller fees to address disruption to sellers.
BrickLink said it paused marketplace access while examining activity it had flagged as unusual. Its notice, updated Nov. 12, says the review found that some members’ usernames and internet protocol (IP) addresses had been accessed. Email addresses were also accessed for a very small number of users, the company said.
The notice said passwords and payment information were not accessed. BrickLink did not give a count of affected members or email addresses. It said it had addressed the issue it identified, would keep monitoring the platform and did not require members to take action at that time.
The company reported no signs that the incident had removed or changed orders, wanted lists, messages or store inventory information. Its separate Studio Forum remained offline. BrickLink had not set a return date for the forum and said it planned to provide more information in the coming days.
BrickLink said it would waive seller fees for November and December 2026, and sellers would not receive invoices for either month. The company acknowledged disruption to its seller community. Brick Fanatics reported that some sellers said their revenue fell sharply during the outage, but did not quantify the reported losses.
BrickLink is a marketplace for buying and selling LEGO parts, sets and minifigures. The LEGO Group announced in 2019 that it had acquired the platform.
A 2023 filing by BrickLink’s counsel to the Maryland attorney general described a separate incident in which an unidentified person threatened to delete data and disrupt operations unless BrickLink paid €50,000. The filing said five Maryland residents’ BrickLink accounts were compromised.
