Belgium contains MyMinfin tax portal attack; services to be rebuilt
Intruders entered Belgium's Federal Public Service Finance environment overnight Oct 27–28, 2026. The agency says the intrusion was caught within hours and stopped before applications were taken over or data reached, with no leak reported. E-services including MyMinfin will be rebuilt in an isolated environment before going back online.
What happened
Attackers entered the systems of Belgium's tax authority, FPS Finance, overnight Oct 27-28, 2026. The intrusion was detected within hours and contained, and the MyMinfin tax portal was taken offline as a precaution. Per the agency, no applications were taken over and no data leaked.
Why it matters
MyMinfin is Belgium's main online platform for tax and financial affairs; the outage hit days before an Oct 31 filing deadline, affecting taxpayers. Rebuilding e-services in an isolated environment will take time, and analysts expect tax-themed phishing exploiting the outage and the deadline change.
What to do
Businesses in Belgium should use the new Nov 16, 2026 deadline for affected filings and follow FPS Finance's official channels. Warn staff and customers about tax-themed email fraud tied to the outage.
For the technical team
- Affected
- FPS Finance (Bélgica) MyMinfin, principal plataforma online de impostos e assuntos financeiros da Bélgica, administrada pelo Federal Public Se · MyMinfin portal and other e-services of Belgium's FPS Finance (FOD Financiën / SPF Finances). Several other government applications remained fully or partially operational.
- Exploitation
- Intrusion reported by FPS Finance itself; detected within hours and stopped before attackers could take over applications or reach data, per the agency. The 'no data leaked' finding is the agency's own assessment; investigators continue to examine the possibility of data exposure. No leak-site claim seen.
- Fix
- No software fix applies. E-services must be rebuilt in an isolated environment before going back online; no return date disclosed.
- Vector
- Not disclosed. Authorities have not identified who is behind the attack or how the hackers gained access to government systems; no group, actor, ransomware or CVE has been named. Possibly infected systems were isolated after detection within hours.
- More details
- Belgium's federal police and the Centre for Cybersecurity Belgium are investigating. Filings due Oct 31 were extended to Nov 16, 2026. Analysts (DailyDarkWeb) expect tax-themed phishing exploiting the outage and the deadline change. Earlier this month, FPS Finance took websites offline over an 'international security issue', coinciding with an alert over two critical PHP remote code execution vulnerabilities that shut down European government sites; Belgium's national cybersecurity center said it had no reports of successful exploitation against Belgian websites, and no link between the incidents has been established.
Timeline
Agency says the Oct 27–28 overnight intrusion was contained within hours and that, per its account, no applications were taken over and no data leaked; services will be rebuilt in isolation.
Belgian tax authority's MyMinfin portal went offline after a cyberattack, days before the filing deadline.
Sources 2 sources
- Cyberattack disrupts Belgian tax services before filing deadline The Record
- @DailyDarkWeb @DailyDarkWeb
