Belgium's tax agency hit by cyberattack: MyMinfin offline, Oct 31 deadline extended
A cyberattack has forced Belgium's federal finance and tax service to take its MyMinfin portal and other online services offline days before the October 31 filing deadline; the agency says it has seen no sign that data was stolen.
At a glance
- Belgium's Federal Public Service (FPS) Finance said on Wednesday, October 28, 2026, that its digital services had been hit by a cyberattack.
- As a precaution it temporarily took MyMinfin — the gateway to the Tax-on-web income-tax filing system — and several other online services offline.
- The agency said it had found no indication of a data breach or that any data had been stolen, but the investigation is continuing.
- Taxpayers with specific income who had to file online by October 31 will get a 'sufficient extension'; the new date has not yet been announced.
- No timetable for restoring services has been given, and no group has been named as responsible.
Belgium's federal finance and tax service has been hit by a cyberattack that forced it to shut down its MyMinfin taxpayer portal and several other online services, just days before a tax filing deadline. The Federal Public Service (FPS) Finance said on Wednesday, October 28, 2026, that it had taken the systems offline as a precaution, had found no sign so far that any data was stolen, and would give extra time to taxpayers due to file by October 31.
What happened
In a statement, FPS Finance said its digital services had been targeted by a cyberattack and that it was investigating the specific impact while monitoring the situation closely. MyMinfin — the personal online account that Belgian residents use to reach Tax-on-web, view tax documents and deal with the tax administration — was among the services switched off, along with several others that the agency did not list in full.
A large part of the service's other applications remained available with full or partial functionality while technicians investigated and secured the network.
| Key facts | Detail |
|---|---|
| Target | Federal Public Service (FPS) Finance, Belgium |
| Announced | Wednesday, October 28, 2026 |
| Services offline | MyMinfin (gateway to Tax-on-web) and several other online services |
| Data stolen? | No indication so far, investigation continuing |
| Deadline affected | October 31, 2026 — online income-tax returns with specific income |
| New deadline | "Sufficient extension"; date to be announced |
| Restoration | No timetable given |
| Attacker | Not identified |
What it means for taxpayers
Most Belgian residents filed their 2026 income-tax returns earlier in the year, but people with specific income — such as certain self-employed earnings or foreign income — had until October 31 to file online. FPS Finance said these taxpayers would get a sufficient extension and that the replacement date would be announced as soon as possible. It has not yet said whether payments, refunds or other procedures will be affected.
Anyone due to file should not try to use unofficial websites or links sent by email or text message. Cyberattacks on tax agencies are often followed by phishing messages pretending to come from the authorities; FPS Finance will announce the new deadline through its official channels.
Background
Government agencies across Europe have become frequent targets for hackers, from criminal ransomware gangs seeking payment to state-linked groups seeking information or disruption. Belgium, home to the European Union's institutions and NATO headquarters, has faced several serious incidents in recent years, including a breach at its state security service that came to light in 2025.
FPS Finance has not said what kind of attack hit its systems — for example whether it was ransomware, a data-theft attempt or an attack designed to overwhelm its servers — and no group has claimed responsibility.
Why it matters
A tax administration holds some of the most sensitive data a government has: incomes, bank details, addresses and family information for millions of people. Even when no data is taken, shutting down the main online portal disrupts filing and contact with the tax office for residents and businesses. The incident is also a reminder for tax authorities elsewhere, including in Pakistan and South Asia, where filing is moving online quickly, of how much depends on a single digital gateway.
What happens next
FPS Finance is expected to announce the new filing date and to give updates on when MyMinfin and the other services will return. Investigators will try to establish how the attackers got in, what they were after, and whether any data was accessed after all.
Questions people are asking
Is MyMinfin down?
Yes. FPS Finance took MyMinfin and several other online services offline on October 28, 2026, as a precaution after a cyberattack. It has not said when they will be back.
Will the Belgian tax return deadline of October 31 be extended?
Yes. FPS Finance said people filing online personal income-tax returns with specific income, due by October 31, 2026, will get a sufficient extension, with the new date to be announced as soon as possible.
Was taxpayer data stolen in the Belgian finance ministry cyberattack?
FPS Finance said there was no indication so far of a data breach or that any data had been taken, but it is still investigating the exact cause and scale of the attack.
