Tax Portal Taken Offline After Attack in Belgium in 2026

Brussels (Brussels Morning Daily) October 29, 2026 – Belgium’s Federal Public Service Finance, FOD Financiën, has temporarily taken its primary online portal MyMinfin and several digital services offline following a cyberattack. Federal authorities confirmed that the digital intrusion penetrated the ministry’s network overnight between Tuesday and Wednesday, forcing technical teams to isolate affected applications to protect infrastructure. While forensic investigations remain ongoing, officials reported no indications that personal citizen data or financial records were compromised or exfiltrated. To accommodate impacted taxpayers, the government confirmed an official deadline extension for tax returns originally due by 31 October.

Belgium’s tax and finance administration is working to secure and restore its digital infrastructure following a cyberattack that compromised elements of the federal network overnight on Wednesday. The Federal Public Service Finance (FOD Financiën) announced that it had proactively severed internet access to its primary citizen and business tax platform, MyMinfin, as well as secondary digital services including Tax-on-web and Biztax. The precautionary shutdown was executed after monitoring systems detected unauthorized attempts to penetrate and alter portions of the department’s digital environment.

How Did the Cyberattack Impact Belgium’s MyMinfin Portal and Digital Infrastructure?

According to reporting by The Brussels Times and statements from FOD Financiën spokesperson Francis Adyns, the cyberattack succeeded in penetrating the finance ministry’s internal systems during the overnight hours between Tuesday and Wednesday. Security protocols identified the malicious activity within a few hours, triggering automated containment measures designed to prevent external actors from gaining administrative control over core database applications.

As reported by The Brussels Times, technical teams isolated potentially infected network segments before intruders could access sensitive financial archives or systematically exfiltrate records. To prevent further lateral movement within state networks, authorities shut down public access to MyMinfin—the central web portal utilized by millions of Belgian citizens, corporate entities, and certified accountants to manage annual tax filings, consult property documents, and access pay certificates.

In an official public statement released on Wednesday, FOD Financiën confirmed that its IT security divisions were systematically evaluating the precise operational impact of the breach.

As reported by Hromadske, the agency released an official statement clarifying the status of stored public records:

“So far, there is no indication that a data breach has occurred or that data has been stolen.”

As detailed by The Brussels Times, FOD Financiën representatives emphasized that re-establishing public access requires verifying every subsystem within an isolated quarantine environment to eliminate latent vulnerabilities.

As reported by The Brussels Times, FOD Financiën stated regarding restoration efforts:

“We are monitoring the situation closely and are doing everything we can to restore the affected services as quickly as possible.”

What Specific Tax Deadline Extensions Were Granted to Belgian Taxpayers?

The emergency shutdown coincided directly with a critical administrative window for Belgian taxpayers filing declarations containing specific professional and foreign income streams. These returns were originally subject to a strict statutory filing deadline of 31 October.

According to reporting by The Brussels Times, ministry officials recognized that the unavailability of MyMinfin, Tax-on-web, and Biztax prevented both individual filers and professional accounting firms from submitting necessary documentation. In response to the technical blackout, FOD Financiën formally announced an automatic extension for all tax returns affected by the outage.

As reported by The Brussels Times, the finance ministry officially extended the submission deadline for affected tax declarations from 31 October to 16 November. The extension applies across online declaration platforms, ensuring that citizens and commercial enterprises will not face administrative penalties, fines, or default tax increases as a result of the forced technical outage.

Who Is Investigating the Cyberattack and What Security Protocols Were Triggered?

As reported by The Brussels Times, a comprehensive law enforcement and national security investigation has been launched to identify the origins, vector, and perpetrators behind the digital breach.

According to reporting by The Brussels Times, the investigation is being led jointly by specialized cybercrime units from the Belgian Federal Police alongside technical specialists from the Centre for Cybersecurity Belgium (CCB), the national authority overseeing state digital resilience. Forensic experts are analyzing server log files, network packet traces, and system access points to determine whether the attack was orchestrated by criminal ransomware syndicates or state-sponsored threat actors.

Federal authorities have not publicly named any suspect groups or disclosed whether a ransom demand was communicated prior to system isolation. Furthermore, as reported by The Record from Recorded Future News, authorities have not established any public link between Wednesday’s network penetration and earlier international security alerts that previously prompted temporary technical adjustments across European public sector sites.

What Is the Background of Digital Government Infrastructure and Cyber Threat Trends in Belgium?

The Federal Public Service Finance is among the largest administrative departments in Belgium, overseeing the collection of direct taxes, customs duties, value-added tax (VAT), and real estate registration fees. Over the past decade, the Belgian government has progressively migrated public administration services onto centralized digital platforms, making MyMinfin a critical pillar of state operational continuity.

Under Belgian financial regulations, the MyMinfin portal processes millions of authenticated sessions annually via secure digital identity frameworks, including itsme and eID card readers. The system automatically pre-fills taxpayer data, interfaces with employer payroll records, and routes corporate documentation directly to regional assessment centers.

In recent years, European public sector institutions have faced elevated levels of targeted cyber activity, ranging from Distributed Denial of Service (DDoS) attacks designed to overwhelm public portals to sophisticated credential-harvesting and network-intrusion operations targeting critical government infrastructure. The Centre for Cybersecurity Belgium has repeatedly advised federal departments to implement zero-trust network architectures, multi-factor authentication, and isolated backup protocols to mitigate systemic risks associated with public-facing digital portals.

How Will the Digital Disruption Impact Taxpayers, Accounting Professionals, and Government Operations?

The ongoing system outage and subsequent technical recovery process will carry immediate operational consequences for individual taxpayers, commercial businesses, and state administrative bodies across Belgium.

1. Individual Taxpayers and Professional Accountants

For individual citizens holding complex income profiles and accounting firms representing corporate clients, the extension to 16 November relieves immediate compliance pressure caused by the portal blackout. However, tax advisors face an adjusted workflow timeline, requiring them to compress filing schedules once portals return to full operational capacity. Accounting associations will monitor FOD Financiën announcements closely to ensure that electronic signature systems and mandate authorizations function correctly upon service restoration.

2. State Financial Administration and Public Sector Cybersecurity

For FOD Financiën and the Centre for Cybersecurity Belgium, the focus shifts toward completing forensic system clearing and hardening network entry points. The incident is expected to accelerate state-level reviews regarding the isolation of critical financial databases from public-facing web applications. Federal lawmakers are likely to request formal briefings regarding the breach to evaluate whether additional budgetary resources and technical staff are required to protect Belgian civil infrastructure from future cyber threats.