# Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offline · pwn.watch > Belgium's Federal Public Service Finance (FOD Financiën / SPF Finances) said on Oct 28 2026 that its digital services were hit by a cyberattack. As a precaution it took MyMinfin, the portal Belgians use to view and file tax returns, and several other services offline while it investigates and carries out technical measures. The agency says there are no signs so far of a data leak or stolen data, and that this is still being investigated. Most of its other applications stay fully or partly available. Filers with specific income, whose online deadline was Oct 31, will get an extension; the new date has not been announced yet. Page: https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026 · generated 2026-10-29T05:02:01.829Z ## Status - Severity: medium · status: live · patch: partial - Product: FOD Financiën / SPF Finances digital services (MyMinfin) - Started: 2026-10-28 ## Follow this incident - RSS (one item per update): https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026/feed.xml - JSON Feed: https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026/feed.json - Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026.json - This file: https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026/llms.txt ## Updates (newest first) - 2026-10-28: Belgium's federal finance and tax agency FOD Financiën / SPF Finances says its digital services are hit by a cyberattack and takes MyMinfin and several other services offline as a precaution; it says there are no signs so far of a data leak or stolen data. (https://news.belgium.be/nl/node/45668/pdf) ## Fix brief # Security brief: Cyberattack on Belgium's tax agency FOD Financiën takes MyMinfin offline Source: https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026 · status: live · severity: medium · updated Oct 29, 2026, 02:15 UTC ## Patch status **PARTIALLY PATCHED: some fixes exist, but not every affected branch/product is covered. Check carefully and apply mitigations where no fix exists.** ## What it is Belgium's Federal Public Service Finance (FOD Financiën / SPF Finances) said on Oct 28 2026 that its digital services were hit by a cyberattack. As a precaution it took MyMinfin, the portal Belgians use to view and file tax returns, and several other services offline while it investigates and carries out technical measures. The agency says there are no signs so far of a data leak or stolen data, and that this is still being investigated. Most of its other applications stay fully or partly available. Filers with specific income, whose online deadline was Oct 31, will get an extension; the new date has not been announced yet. Severity detail: National tax portal taken offline after a confirmed cyberattack; no data theft indicated so far, attacker and method not disclosed - Product: FOD Financiën / SPF Finances digital services (MyMinfin) ## Affected versions - Not specified in the data. Check the advisories below. ## Check whether you're affected No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above. ## Fix No fixed version is listed. Follow the vendor advisory below. ## Mitigations The data marks this as partial. Until every affected component is fixed, apply the vendor mitigations from the advisories below (restrict network exposure of the affected service, disable the vulnerable feature if the advisory allows). ## Secrets to rotate This incident involves possible credential exposure. Rotate any credentials (API keys, tokens, env vars, SSH keys) that were present on affected systems or in affected builds while vulnerable/compromised versions were installed, and review access logs. ## Specific notes There is nothing to patch. If you file Belgian taxes, wait for the official new deadline for returns with specific income rather than rushing, and only use MyMinfin through the official minfin.fgov.be address once it is back. Expect phishing that uses the outage as a lure: the agency does not ask for credentials or payments by email or SMS. ## Latest updates - Oct 28, 2026: Belgium's federal finance and tax agency FOD Financiën / SPF Finances says its digital services are hit by a cyberattack and takes MyMinfin and several other services offline as a precaution; it says there are no signs so far of a data leak or stolen data. ## Advisories - [Cyberincident bij de FOD Financiën](https://news.belgium.be/nl/node/45668/pdf) (FOD Financiën (news.belgium.be)) ## Write-ups & news - [Belastingaangiftes bekijken of indienen tijdelijk onmogelijk door cyberaanval bij FOD Financiën](https://www.vrt.be/vrtnws/nl/2026/10/28/cyberaanval-bij-fod-financien/) - [Les services numériques du SPF Finances inaccessibles suite à une cyberattaque](https://www.rtbf.be/article/les-services-numeriques-du-service-public-federal-finances-touches-par-une-cyberattaque-11807164) - [FOD Financiën getroffen door cyberaanval: MyMinfin en andere digitale diensten liggen plat](https://itdaily.be/blogs/beveiliging/fod-financien-getroffen-door-cyberaanval-myminfin-en-andere-digitale-diensten-liggen-plat/) ## Caveats The agency has not said what kind of attack it was or who is behind it. It is a separate event from Oct 21, when SPF Finances took several of its websites offline as a precaution over the PHP2Shell vulnerabilities; that time MyMinfin stayed available and Belgium's CCB reported no attacks on Belgian sites. --- Machine-readable: https://pwn.watch/i/belgium-fod-financien-cyberattack-myminfin-offline-oct-2026.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.