Lego has taken its online marketplace BrickLink offline after detecting what it described as unusual activity on the platform, and three days later it has still not said what that activity was.
BrickLink is where Lego collectors worldwide buy and sell secondhand sets, source individual bricks and chase limited editions. It was built by a fan and bought by Lego in 2019. For a certain kind of hobbyist it is not a convenience but the whole supply chain.
What Lego has actually said
In a message on the BrickLink homepage, the company said that before restoring the site it wanted to "fully understand" what had happened.
"That means containing the issue, investigating how it happened and checking for related issues," Lego said.
Read that carefully, because of what is missing. There is no mention of a breach, no mention of a hack, and nothing either way about whether customer data was affected. The company published the update only after being contacted by the BBC.
The silence is the story
For the first part of the outage, the message on the site simply said BrickLink was down for maintenance. That is a meaningfully different claim from "unusual activity", and the change came without explanation.
Earlier on Wednesday a notice said the platform would be back by that evening. That message has since been deleted, and there is now no time frame at all for its return.
A company that has contained an incident and knows it was harmless can normally say so quickly. A company still "checking for related issues" after three days is describing an investigation that has not finished. Neither of those is proof of a breach — but the absence of a plain denial is the part worth noticing.
A user caught in the middle
Melanie Hoskin, a cyber-security professional who has collected Lego for 45 years and uses BrickLink regularly, told the BBC she received multiple payment links for a limited-edition pre-order she had already paid for.
She said Lego did not believe the payment had been taken, and at one point told her it would ban her from BrickLink. The problem has since been resolved, and Lego said it is not aware of wider payment issues. It is unclear whether the payment glitch is connected to whatever took the site down.
Hoskin said she felt as though she had been accused of theft. "Lego is my stress relief," she said. "Lego is what I grew up with as a kid, it's what bonded me with my sisters."
"I've got a Lego room and I've not even been able to walk into it this past couple of weeks because it just angers me."
What a seller should do while it is down
If you trade on BrickLink from Bangladesh or anywhere else, treat the outage as unresolved rather than over. Change the password now if it is reused anywhere else, since you cannot change it on a site that is down and reuse is what turns one incident into several. Watch the card or wallet you had saved there for charges you did not make. Keep your own record of open orders and payments, because a marketplace that comes back may come back with gaps.
And be wary of any email offering to "restore" your account or confirm a payment while the site is dark. An outage with no official explanation is exactly the window phishing campaigns are built for.
