Lego website hacked by hackers to steal cryptocurrency

People who visited Lego’s website on the evening of October 4 saw a banner featuring gold coins with the company’s logo, claiming that the «Lego Coin» was now officially released.

The banner even promised «secret rewards» for those who bought them. But Lego did not actually launch an official cryptocurrency, and according to The Brick Fan, the buy button led to an external cryptocurrency site that sold «LEGO Tokens» for Ethereum. It seems that the website was hacked by attackers who changed its banner and used it for their cryptocurrency scam.

As noted by users on the Lego subreddit, the incident occurred at night for Lego’s headquarters. However, the company reacted relatively quickly and removed the unauthorized banner and link. At the time of writing, the banner about Lego’s collaboration with Fortnite is back up, and the «buy now» link leads to the collection.

Lego told Engadget that no user accounts have been compromised and that they have determined the cause of the problem. The company also said it is taking steps to prevent similar incidents in the future. However, the company refused to disclose details about this «cause» or the measures it is implementing.

Here is the company’s official statement: «On October 5, 2024 (the evening of October 4 in the United States), an unauthorized banner briefly appeared on LEGO.com. It was quickly removed and the issue was resolved. No user accounts were compromised and customers can continue to shop as usual. The cause has been identified and we are taking steps to prevent this from happening again in the future.»