LEGO's website was hacked to promote a fraudulent cryptocurrency scheme, misleading users into believing in a new LEGO coin. The incident was quickly addressed, with no user accounts compromised.
On October 4, 2024, the LEGO website was compromised by cybercriminals who used the platform to promote a fraudulent cryptocurrency scheme. An unauthorized banner appeared on the homepage, misleading visitors into believing that a new "LEGO coin" was being launched, complete with promises of secret rewards for early buyers. The incident was quickly reported by vigilant users on social media, leading to a swift response from LEGO to remove the scam and reassure customers.
The breach occurred on the evening of October 4, when users noticed a banner on the LEGO homepage featuring gold coins adorned with the LEGO logo. The banner claimed that the "LEGO coin" had been officially released and encouraged visitors to click for secret rewards. However, clicking the link redirected users to a third-party cryptocurrency site where they could purchase the fraudulent tokens using Ethereum.
Upon learning of the hack, LEGO acted promptly. The company removed the unauthorized banner and restored the website to its original state within about 75 minutes. LEGO issued a statement confirming that no user accounts had been compromised and that customers could continue shopping without concern. They also noted that the cause of the breach had been identified and that measures were being put in place to prevent similar incidents in the future.
The scam was designed to exploit the growing interest in cryptocurrencies, particularly Ethereum, which is known for its smart contracts and decentralized finance applications. Cybercriminals often target reputable brands like LEGO to lend credibility to their schemes, making it crucial for consumers to remain vigilant.
Oded Vanunu, Chief Technologist at Check Point Software, emphasized the importance of cybersecurity for trusted brands. He noted that the incident serves as a reminder of the increasing prevalence of online scams and the need for organizations to continuously monitor their digital platforms. He advised consumers to be cautious of unexpected offers and to verify the legitimacy of any promotions before engaging.
To avoid falling victim to similar scams, consumers should:
While LEGO managed to mitigate the impact of this cyberattack, the incident highlights the ongoing threat posed by cybercriminals. Companies must invest in robust cybersecurity measures to protect their platforms and maintain consumer trust. As the digital landscape evolves, so too must the strategies employed to safeguard against such threats.
