Belgium's finance ministry takes MyMinfin, Tax-on-web and Biztax offline after a cyberattack; it says the intruders were stopped before reaching data, and moves the Oct 31 filing deadline to Nov 16
FPS Finance (FOD Financiën / SPF Finances) said on Oct 28 that its digital services were hit by a cyberattack, that MyMinfin and several other services were taken offline as a precaution, and that there are no indications of a data breach or stolen data so far, though that is still being investigated. Much of its other applications stayed available.
- Timeline (spokesperson Francis Adyns, via Belga): the attackers got in during the night of Oct 27 to 28 and were detected within hours after several attempts to alter parts of the environment. Potentially infected elements were isolated; the services must be rebuilt in an isolated environment, and no restore date has been given.
- Taxpayers: returns with specific income originally due Oct 31 can be filed until Nov 16, 2026.
- Investigation: the federal police and the Centre for Cybersecurity Belgium are involved. No group has claimed it, and authorities have not linked it to the PHP2Shell precautionary shutdowns earlier this month.
Watch for: phishing that uses the outage, such as fake "MyMinfin restored, log in here" or refund messages.
Sources: News.belgium (FOD Financiën / SPF Finances): Cyberincident bij de FOD Financiën (Oct 28) · SPF Finances news: cybersecurity incident page · The Brussels Times (Belga): No data leaked in Finance Ministry cyberattack, services still down (Oct 29)