Skip to content

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Become a sponsor

One slot: pwn.watch, gifs.so, flavors.design, kitze.io, every kitze repo, and an X shout-out.

Secure checkout on Polar. Right after paying you set up your ad on kitze.io.

LiveMediumPartly patchedBreaches & attacks

Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offline

FOD Financiën / SPF Finances digital services (MyMinfin)

Belgium's Federal Public Service Finance (FOD Financiën / SPF Finances) said on Oct 28 2026 that its digital services were hit by a cyberattack. As a precaution it took MyMinfin, the portal Belgians use to view and file tax returns, and several other services offline while it investigates and carries out technical measures. The agency says there are no signs so far of a data leak or stolen data, and that this is still being investigated. Most of its other applications stay fully or partly available. Filers with specific income, whose online deadline was Oct 31, will get an extension; the new date has not been announced yet.

Why this severity: National tax portal taken offline after a confirmed cyberattack; no data theft indicated so far, attacker and method not disclosed

Started
Oct 28, 2026

Follow this incident

Discuss on X ↗

Affected

Not published yet

Fixed in

No fixed release yet

Timeline1

  1. Belgium's federal finance and tax agency FOD Financiën / SPF Finances says its digital services are hit by a cyberattack and takes MyMinfin and several other services offline as a precaution; it says there are no signs so far of a data leak or stolen data.

Advisories1

News & write-ups3

Notes & caveats

The agency has not said what kind of attack it was or who is behind it. It is a separate event from Oct 21, when SPF Finances took several of its websites offline as a precaution over the PHP2Shell vulnerabilities; that time MyMinfin stayed available and Belgium's CCB reported no attacks on Belgian sites.

Get an email when a new major security incident drops. No spam, unsubscribe any time.