Cyberattack on Belgian FPS Finance takes MyMinfin tax portal offline before filing deadline
Severity: medium · Patch status: no-fix-needed · Since 2026-10-29
Belgium's FPS Finance took its main online tax platform, MyMinfin, offline on 2026-10-29 after a cyberattack, days before an October 31 filing deadline for certain income types. Affected taxpayers will receive extended deadlines. Authorities have not identified the attackers or the access method and say there is no indication of data breach or theft, though investigation continues. Services were suspended as a precaution while systems are secured; other government applications remain partially operational. The incident follows an earlier October shutdown of Belgian government websites over critical PHP vulnerabilities (remote code execution) affecting servers across Europe; no link between the incidents has been established.
What to do
- Monitor FPS Finance communications for revised filing deadlines and service restoration notices
- Taxpayers with October 31 obligations should await the announced extension rather than assume the deadline stands
- Be alert for phishing or scam sites impersonating MyMinfin while the official portal is down
- Government operators should verify PHP servers are patched against the recently disclosed critical RCE vulnerabilities
- Watch for updates on whether data exposure is confirmed
Sources
All live incidents on Threat Watch
