LEGO Group faced a cyber incident when a scam advertisement for LEGO Coin appeared on its homepage.

Detection of fake advertisement

The LEGO Coin scam was first spotted by X user ZTBricks. The advertisement promised ‘secret rewards’ for buying the fake LEGO Coin. Users clicking the 'Buy Now' button were redirected to a phishing site.

LEGO's response to the incident

LEGO promptly removed the scam message from its site and stated the incident was temporary, with no user accounts compromised. Measures to prevent such occurrences have been implemented.

Context and implications

The LEGO Coin incident occurred at 3 am in Billund, Denmark, home to LEGO's main office. It highlights increasing activity from crypto scammers. According to Scam Sniffer, cryptocurrency scams accounted for $127 million in Q3 2024, including $46 million in September.

The LEGO Coin incident highlights the importance of cybersecurity and user vigilance online. LEGO swiftly addressed the issue, reminding us of the risks associated with digital assets.