[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-bricklink-reopens-after-breach-that-exposed-usernames-and-ips":10,"sections":44},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":34,"tags":35,"sources":39,"feedback":43,"feedback_at":22,"cost_usd":43,"total_tokens":43},13144,"bricklink-reopens-after-breach-that-exposed-usernames-and-ips","BrickLink Reopens After Breach That Exposed Usernames and IPs","The Lego-owned marketplace says passwords and payment details were untouched, but usernames, IP addresses and some emails were accessed.","BrickLink, the Lego-owned marketplace, is back in operation after a data breach, and the company says the damage stopped short of passwords and payment information.\n\nThe company confirmed that attackers accessed usernames, IP addresses and a small number of email addresses. It said passwords and payment details were not accessed. BrickLink is a marketplace where Lego fans buy and sell sets and parts, so the affected data comes from buyers and sellers rather than a general retail audience.\n\nThe split matters. Passwords and card numbers are what let an attacker take over an account or spend someone's money, and by the company's account neither was exposed. What was exposed is thinner but not harmless. A username tied to an IP address (the numeric address that roughly indicates where a connection originates) links a marketplace identity to a rough location. An email address gives a scammer a way to reach that person.\n\nThe realistic risk is phishing. A message that mentions a real BrickLink username and looks like an order notice or an account warning is more convincing than a generic one. Because the company says passwords were not taken, a forced reset is less urgent than caution with unexpected messages that claim to come from the marketplace.\n\nSeveral questions remain open: how many accounts were affected, how the attackers got in, and how long the data was accessible. The phrase \"a small number of email addresses\" is also odd next to the broader category of usernames and IP addresses. It suggests the three data types were not exposed in equal volume, and the company has not said what the proportions were.","[\"bricklink\",\"data-breach\",\"lego\"]","2026-11-14T19:09:43.000Z","2026-11-15T03:19:01.001Z","2026-11-15T03:19:54.391Z","published",null,[24,30],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Remove the reporting-gap language ('the only measure of scale on offer', 'as relayed gives no user count'). Cut the unsupported claim that BrickLink 'hands payments to others' and the 'luck or architecture' speculation, since the source says neither. Then add verifiable specifics such as dates, the outage, and Lego's or BrickLink's statement, or trim the piece to what the source supports.","resolved",{"id":31,"reviewer":26,"round":32,"reason":33,"status":29},"editor-r2",2,"The source never gives a date, so remove 'reported on November 14' or verify it against the source, and cut the filler line 'the site's return to service followed the breach'; if no verified specifics such as the breach date, outage length or a Lego\u002FBrickLink statement are available, keep the piece to what PCMag actually supports.","security",[36,37,38],"bricklink","data-breach","lego",[40],{"name":41,"url":42},"PCMag","https:\u002F\u002Fwww.pcmag.com\u002Fnews\u002Flego-marketplace-bricklink-back-in-action-after-data-breach",0,{"sections":45},[46,51,55,60,65,70,75,80,85,90,95,100,105,110],{"name":47,"slug":48,"count":49,"latest_published_at":50},"AI","ai",7162,"2026-11-15T12:00:00.000Z",{"name":52,"slug":34,"count":53,"latest_published_at":54},"Security",1141,"2026-11-15T17:15:13.000Z",{"name":56,"slug":57,"count":58,"latest_published_at":59},"Deals","deals",671,"2026-11-15T14:00:00.000Z",{"name":61,"slug":62,"count":63,"latest_published_at":64},"Policy","policy",630,"2026-11-15T16:25:16.000Z",{"name":66,"slug":67,"count":68,"latest_published_at":69},"Consumer Tech","consumer-tech",383,"2026-11-15T17:55:32.000Z",{"name":71,"slug":72,"count":73,"latest_published_at":74},"Hardware","hardware",343,"2026-11-15T14:19:24.000Z",{"name":76,"slug":77,"count":78,"latest_published_at":79},"Science","science",236,"2026-11-14T20:54:14.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Software","software",177,"2026-11-14T08:54:55.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Startups","startups",162,"2026-11-13T17:32:35.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"General","general",130,"2026-11-15T15:41:13.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"Gaming","gaming",112,"2026-11-14T19:34:13.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":111,"slug":112,"count":113,"latest_published_at":114},"How-To","how-to",10,"2026-11-14T23:45:00.000Z"]