Short answer
On 28 October 2026 Belgium's federal finance ministry, FOD Financiën, confirmed a cyberattack and took MyMinfin and other online tax services offline as a precaution. The agency says the intrusion was stopped within hours and that nothing so far points to a data leak. The affected filing deadline was pushed to 16 November.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | FOD Financiën (Belgian Federal Public Service Finance) |
|---|---|
| Incident type | Data breach |
| Status | Under investigation |
| Sector | Government (tax administration) |
| Country | Belgium |
| Detected | 2026-10-28 |
| Disclosed | 2026-10-28 |
| People or records affected | Online tax services for all users. No data compromise found so far |
What data was exposed
- No data theft confirmed. The agency says there is currently no indication that data was leaked or stolen
What happened
On Wednesday 28 October 2026, Belgium’s federal finance ministry, FOD Financiën, said it had been the victim of a cyberattack. VRT NWS reported that digital services including MyMinfin, the main online tax portal, were taken offline as a precaution. Taxpayers could temporarily not view or submit returns. The agency said the shutdown helps limit risks and allows technical work to secure its systems.
What the agency says about data
The agency said at the time that there was no indication of a data leak or of stolen data, and that this was being closely investigated and monitored. A spokesperson, Francis Adyns, told Nieuwsblad that the attack was stopped within hours and that the attacker could not expand within the environment to take over applications or reach data, according to The Register. Potentially infected elements were isolated.
These are the agency’s statements, and the investigation is not finished. We have not seen a claim of responsibility, and nothing in the sources names the attacker or the type of attack.
Services and deadlines
The Register says Tax-on-web and Biztax also went offline, citing a spokesperson. Other applications remain available with full or partial functions. Restoring the offline services in an isolated environment “requires considerable time” to rule out new risks.
The agency recognised the impact on tax deadlines. VRT NWS reported that taxpayers close to a deadline would get an extension and that a date would follow. The Register reports the extended 31 October deadline for certain filings, such as sole traders and income from foreign companies, moved to 16 November, with MyMinfin expected back by then.
Why the outage is a scam opportunity
A government portal that is down, plus a deadline, is the setting for urgent fake messages. Expect emails and texts that offer a refund, a “reset” of your access or a link to file before the cut-off. Our guide on government impersonation scams explains how these work, and phishing messages covers the signs of a fake login page. A call that mentions the “cyberattack” and asks for a code is a vishing attempt.
What is still unknown
The entry route, the attacker and the date services return are not public. The agency’s own assessment may change as the investigation continues. See all breach reports for related incidents.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Fake emails or texts posing as MyMinfin or the tax office, offering a 'refund', a 'deadline extension' or a 'fix' for your account.
- Lookalike MyMinfin login pages that collect your eID or itsme details.
- Calls from someone claiming to be the tax administration who asks for payment or a code because of the 'cyberattack'.
- Messages that pressure you to file or pay before the new deadline through a link rather than the official portal.
What to do if you are affected
- 01Do not file or pay through links in emails or texts. Type the official address of FOD Financiën into your browser, or use the app you already have.
- 02Check the new deadline on the official FOD Financiën site: it says certain filings moved to 16 November. Do not rely on a message that quotes a different date.
- 03Never give an eID PIN, itsme code or bank code to anyone who contacts you about the incident.
- 04Be wary of any message that says your tax data was stolen. The agency says there is no indication of that so far, so a message that says otherwise should be verified through the official channel.
- 05Do not click links in unexpected messages that claim to come from the tax agency, and use the official site to check any request.
Frequently asked questions
Was my tax data stolen in the FOD Financiën attack?
The agency says there is currently no indication of a data leak or theft, and that this is still being investigated. A spokesperson told Nieuwsblad, as quoted by The Register, that the attacker could not spread within the environment to reach applications or data.
Which services were taken offline?
FOD Financiën named MyMinfin. The Register, citing a spokesperson, also reported Tax-on-web and Biztax going offline. Other applications stay available fully or partly.
What is the new filing deadline?
The Register reports that the 31 October extended deadline for certain filings, such as sole traders and income from foreign companies, moved to 16 November. VRT NWS first said only that a date would follow, so confirm on the official site.
When will MyMinfin be back?
No restoration date had been given in the reports we read. The agency says services must be restored in an isolated environment, which takes considerable time.
Do I need to do anything about my account?
The sources do not ask users to change passwords. Stay alert to phishing, because fake messages that reference the outage are likely.
Sources
- Cyberaanval bij FOD Financiën (Cyberattack at FOD Financiën), VRT NWS, 2026-10-28
- Belgium's tax agency confirms cyberattack, pulls services offline, The Register, 2026-10-29
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.