Belgium’s tax agency hit by cyberattack, takes services offline

Who is affected

Belgium’s federal tax agency, FOD Financiën, confirmed it was hit by a cyberattack this week. The incident affected several of its digital services, including MyMinfin, the main online tax portal used by individuals, sole traders, and companies to file taxes. Other platforms, such as Tax-on-web and Biztax, were also taken offline as a precaution. While some applications remained available, the main tax filing systems were inaccessible for several days. The Register

The response

The agency said it took these services offline to limit risks and allow technical teams to investigate and secure the systems. In a public statement, FOD Financiën explained that isolating affected systems was necessary to prevent the attack from spreading. Spokesperson Francis Adyns told local media that the attack was stopped within hours and did not expand far enough to compromise applications or data. Elements that might have been infected were isolated, and the agency is now restoring services in a controlled environment. This process is taking time to ensure no further risks remain.

What was taken

At this stage, the agency says there is no evidence that any data was stolen or accessed by attackers. FOD Financiën stated that data protection is a top priority and that this aspect is being closely monitored as investigations continue. The agency’s statement emphasised that, so far, there are no signs of a data breach or data compromise.

What you should do

For those who needed to file taxes using the affected platforms, the agency has extended the deadline for certain filings from 31 October to 16 November. This gives users more time to submit their documents once services are restored. The agency advises users to check for updates on the status of online services and to be cautious of any unsolicited emails or messages claiming to be from the tax agency during this period.

Timeline

• 29 October 2026: FOD Financiën confirms the cyberattack and takes services offline.
• 31 October 2026: Original tax filing deadline for some users.
• 16 November 2026: New extended deadline for affected tax filings.

At the time of writing, only The Register has reported this incident, and there is no primary source or official government statement available. The full details of the attack, including who was behind it and the exact method used, remain unclear.