Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offline
FOD Financiën / SPF Finances digital services (MyMinfin)
Belgium's Federal Public Service Finance (FOD Financiën / SPF Finances) said on Oct 28 2026 that its digital services were hit by a cyberattack. As a precaution it took MyMinfin, the portal Belgians use to view and file tax returns, and several other services offline while it investigates and carries out technical measures. The agency says there are no signs so far of a data leak or stolen data, and that this is still being investigated. Most of its other applications stay fully or partly available. Filers with specific income, whose online deadline was Oct 31, will get an extension; the new date has not been announced yet.
Why this severity: National tax portal taken offline after a confirmed cyberattack; no data theft indicated so far, attacker and method not disclosed
- Started
- Oct 28, 2026
Affected
Not published yet
Fixed in
No fixed release yet
Timeline1
Advisories1
News & write-ups3
- Belastingaangiftes bekijken of indienen tijdelijk onmogelijk door cyberaanval bij FOD FinanciënVRT NWS · Oct 28, 2026
- Les services numériques du SPF Finances inaccessibles suite à une cyberattaqueRTBF · Oct 28, 2026
- FOD Financiën getroffen door cyberaanval: MyMinfin en andere digitale diensten liggen platITdaily · Oct 28, 2026
Notes & caveats
The agency has not said what kind of attack it was or who is behind it. It is a separate event from Oct 21, when SPF Finances took several of its websites offline as a precaution over the PHP2Shell vulnerabilities; that time MyMinfin stayed available and Belgium's CCB reported no attacks on Belgian sites.
Get an email when a new major security incident drops. No spam, unsubscribe any time.