BrickLink is back online after a week of being down and they have also released a statement which confirms that they were a victim of a cyberattack. Some usernames and IP addresses of BrickLink members were accessed as well as a small number of email addresses however passwords and payment information were not accessed. Those who were affected have already been contacted. Sellers will not be compenstated, per se, but BrickLink will waive seller fees for November and December and will not be invoiced.

BrickLink has been offline for several days while we addressed some issues with the site. We understand this may have caused some confusion and uncertainty, and so we’d like to fill you in on what’s been going on.

What happened

We took BrickLink offline after identifying unusual activity on the platform. Our immediate priority was to secure the site, protect our members and ensure the integrity of BrickLink. Our investigation confirmed that some usernames and IP addresses were accessed. A very small number of email addresses were also accessed.

We have already emailed members whose BrickLink usernames or emails were accessed with further information. Based on our investigation, passwords and payment information were NOT accessed. You do not need to take any action at this time. We have addressed the issue identified through our investigation and will continue to monitor the platform closely.

Before bringing the site back online, we needed to understand what had happened. That meant containing the issue, investigating how it happened, checking for related issues, and establishing whether any member information had been accessed or any accounts compromised.

We recognize that this created uncertainty for our community, and we appreciate your patience while we established the facts.

Why was BrickLink offline?

We took BrickLink offline after identifying unusual activity. Before restoring service, we needed to secure the site, investigate what happened and check whether member information or accounts had been affected. Find out more here.

Has any personal or financial information been accessed?

Our investigation found that usernames and IP addresses were accessed, along with a very small number of email addresses. Passwords and payment information were not accessed. We will contact affected members directly with further information.

Do I need to take any action?

You do not need to take any action at this time. We will email members whose usernames or email addresses were accessed with further information.

What has BrickLink done to address the issue?

We have addressed the issue identified through our investigation and will continue to monitor the platform closely.

Is the Studio Forum back online too?

The Studio Forum will remain offline for now. We will share more information over the coming days.

Are my orders, inventory and other BrickLink information intact?

We have found no evidence that orders, wanted lists, messages or store inventories were lost or changed as a result of this incident.

Will you compensate sellers for loss of income while the site was down?

We recognise the disruption, particularly for our seller community. As a gesture of appreciation for sellers’ patience, we will waive seller fees for November and December. Sellers will not be invoiced for these fees for either month.

What should I do if something doesn’t look right after BrickLink returns?

If you notice a problem with your account, inventory, orders or another part of BrickLink, please contact BrickLink Support with as much information as possible so we can investigate.

Keep up with us by following our social media: Facebook | X/Twitter | Instagram | Threads | Reddit