Funko is a publicly traded (NASDAQ: FNKO) pop culture lifestyle company headquartered in Everett, Washington, with additional operations in Hollywood, California and Buckeye, Arizona. The company's core business is manufacturing and distributing collectible merchandise, anchored by its flagship Pop! Vinyl line of figures. Funko holds what it describes as one of the largest portfolios of licenses in the pop culture and collectibles industry, covering intellectual property from movies, television, music, anime, video games, sports, and comics.
The brand portfolio extends beyond vinyl figures to include Loungefly (accessories and apparel), Mondo (collectibles and art prints), Funko Games (board games), and Digital Pop! (digital collectibles). Each brand operates with its own identity but is powered by Funko's central infrastructure and licensing network.
For security professionals, the threat model here is layered. Funko's operation spans physical retail (including a Hollywood flagship), a large e-commerce platform, extensive licensing data pipelines, and a growing digital collectibles vertical. That means defending a mix of customer PII, payment infrastructure, proprietary licensing agreements, and - given the collector market's sensitivity to product leaks - pre-release product information. The attack surface is essentially a consumer goods company compressed into one that also deals in digital assets and high-value IP relationships.
